Top updates from 2025
December 2025
- ox.security
Megalodon: New CI/CD Malware Spreads Across GitHub, Infecting ~5,000+ Repositories - OX Security
A new malware campaign called 'Megalodon' is spreading through GitHub’s CI/CD infrastructure via fake automated commits, infecting over 5,000 repositories. The malware steals AWS, Slack, GitHub, and o…
November 2025
- github.blog
How to write a great agents.md: Lessons from over 2,500 repositories
GitHub Copilot now supports custom agents defined in agents.md files, enabling teams to create specialist agents like @docs-agent, @test-agent, and @security-agent. Each agent requires a specific pers…
October 2025
- heise.de
GitHub ReviewBench: Benchmark for AI-assisted Code Reviews
GitHub introduced ReviewBench, a benchmark to assess AI-assisted code review quality, helping developers compare AI reviewers and predict practical benefits. Based on 219 real pull requests across 19 …
September 2025
- cybernews.com
Leaked GitHub key left lead US public health agency’s code exposed to poisoning
A leaked GitHub app key tied to the CDC remained active for months, potentially allowing attackers to alter code and access cloud systems. GitGuardian found 474 of 500,000 leaked GitHub app keys still…
- github.blog
Spec-driven development with AI: Get started with a new open source toolkit
GitHub open-sourced Spec Kit, a toolkit enabling spec-driven development with AI coding agents like GitHub Copilot, Claude Code, and Gemini CLI. The toolkit formalizes specifications as executable art…
August 2025
- infoworld.com
GitHub restores services after nearly 8-hour outage disrupts Actions, APIs, PRs and Copilot - InfoWorld
GitHub experienced an 8-hour outage starting August 17, 2025, at 1:40 PM UTC, disrupting Actions, APIs, pull requests, Git operations, webhooks, and Copilot. The incident peaked with 20-50% error rate…
- heise.de
LastPass discovers new infostealer variant disguised as GitHub repo
A new infostealer variant named 'Rapuncel' was discovered by LastPass and Delphos Labs, distributed via fake GitHub repositories mimicking LastPass Authenticator. The malware disables 145 antivirus/ED…
June 2025
- infoworld.com
Decoding Origin: Cursor’s GitHub rival that was launched during the latter’s outage - InfoWorld
Cursor launched Origin, an early-beta code-hosting platform integrated with its AI coding environment, positioning itself as a GitHub rival. The move challenges GitHub’s dominance in the software deve…
- itpro.com
Vibe coding startup Cursor just launched a GitHub alternative – here's what users can expect - IT Pro
Cursor introduced Origin, a new code hosting platform competing with GitHub, offering repositories, pull requests, and sync capabilities with GitHub. The service is rolling out in early beta for paid …
- heise.de
Outage at GitHub: Actions, Pages, and Billing Disrupted
GitHub experienced a major outage starting around 9 p.m. CEST affecting GitHub Actions, Pages, and billing systems, with jobs failing due to runner acquisition errors. The disruption lasted over two h…
May 2025
- github.com
GitHub Newsroom
GitHub introduced a new Coding Agent for GitHub Copilot, designed to boost developer productivity. The agent is part of a broader push to integrate AI-driven coding tools into enterprise workflows, fo…
April 2025
- infoworld.com
GitHub Copilot CLI adds Rubber Duck review agent
GitHub introduced an experimental Rubber Duck mode in Copilot CLI that uses a second AI model from a different family to review and critique the primary agent’s plans before execution. The feature aim…
Track GitHub on autopilot
- · Weekly AI brief: narrative summary of what shipped, every Monday 9 AM
- · Email or Slack alerts, or chat with the archive in your dashboard
- · Add GitHub + up to 2 more competitors free, no credit card