Do Son GitHub disables Rockchip's MPP repository after a DMCA takedown by FFmpeg. The move follows a two-year standoff over blatant LGPL license violations.
github
Kaspersky warns of Webrat malware targeting researchers via fake GitHub PoCs for CVE-2025-10294 and other high-CVSS flaws to install a backdoor.
MAS is ditching Batch for PowerShell! Discover how the new roadmap optimizes Windows 10 & 11 activation while maintaining a legacy branch for older systems.
NexusRoute is a sophisticated Android RAT campaign impersonating Indian E-Challan/mParivahan via GitHub phishing. It steals UPI PINs and conducts surveillance using a native-backed and professionally maintained malware framework.
PyStoreRAT, a new fileless RAT, is spreading via fake GitHub repositories targeting developers. It executes as a JS implant via mshta.exe and includes explicit evasion logic against CrowdStrike.
Apple issued a DMCA takedown to GitHub, forcing the deletion of over 8,270 repositories and forks containing the leaked App Store web front-end source code.
GitHub added support for Sign in with Apple, allowing users to create accounts instantly and use a randomized relay email address for enhanced privacy protection.
A new DDoS-as-a-service botnet, ShadowV2, uses GitHub CodeSpaces and Docker to mimic legitimate cloud apps, bypassing traditional defenses and enabling powerful attacks.
LastPass warns of a new SEO poisoning campaign that uses fake GitHub repos to trick Mac users into downloading Atomic Stealer, a malware that steals data.
CYFIRMA uncovers XillenStealer, a new Python-based, open-source malware on GitHub. Its built-in builder enables even novices to steal data and credentials.
Anthropic is launching a web-based version of Claude Code. The new tool allows developers to work on code from any browser, streamlining workflows with cloud-based AI.
OpenAI's Codex gets a major update with a new VS Code extension and local-to-cloud handoff. The update allows for seamless, synced coding tasks from anywhere.
A supply chain attack on the Nx build system is stealing crypto wallets and SSH keys from developers. The malware also abuses AI tools for data exfiltration.
A critical flaw in the AI tool CodeRabbit allowed a researcher to gain RCE and write access to over a million repositories via a malicious pull request.
A new report reveals a North Korean espionage campaign targeting embassies with spear phishing and a sophisticated C2 channel hidden on GitHub.
A new large-scale malware campaign is using GitHub repositories disguised as game cheats and software cracks to distribute SmartLoader and steal user data.
GitHub CEO Thomas Dohmke is resigning as Microsoft moves to integrate the platform into its CoreAI division, ending GitHub's independent operations.
Socket uncovers 11 malicious Go packages, including 8 typosquats, on GitHub. The packages deliver stealthy, in-memory payloads that compromise developer machines and CI pipelines.
OpenAI's GPT-5 is officially launching! Get the details on the different versions, from GPT-5 Mini to GPT-5 Chat, and how they will be rolled out.
Microsoft PlayReady DRM certificates (SL2000 & SL3000) have been leaked to GitHub. Microsoft issued a DMCA for SL3000, and Amazon is suspending accounts using the leaked keys to bypass DRM.
GitHub is experiencing a widespread service outage, affecting Git operations, API requests, pull requests, and issue tracking. The engineering team is actively working on restoration.
Socket discovered 10 malicious npm packages from Toptal's GitHub, exfiltrating GitHub tokens and wiping systems. The compromise vector is under investigation.