- Securitycybersecuritynews.com
Hackers Target 61 GitHub Repositories With Command Injection Attacks to Steal CI/CD Secrets
A coordinated command injection attack targeted 61 public GitHub repositories on September 1, 2026, exploiting GitHub Actions workflows to steal CI/CD secrets. Attackers embedded malicious Bash comman…
- Featuregithub.blog
pull_request_target blocked by default December 2
GitHub will permanently block pull_request_target events by default in all public repositories starting December 2, 2026, to mitigate security risks from untrusted forked code accessing secrets. Enfor…
- blockonomi.com
DeepSeek Coding Agent Routes GitHub Tasks Through Team Chats
DeepSeek released an open-source coding agent prototype called Super-agent that monitors GitHub repositories and responds to team requests via Feishu group chats. It creates task-specific sessions, co…

- note.com
GitHub Copilot's cloud agents continue even from your phone: AI work doesn't stop when you leave your desk
GitHub announced at GitHub Universe 2026 that Copilot cloud agents can now continue tasks across VS Code, GitHub Mobile, web, CLI, Slack, and Teams without interruption. Sessions detach from individua…

- Eventgithub.blog
Game Off 2026: The theme is SHIFT
GitHub revealed Game Off 2026, its 14th annual game jam, with the theme SHIFT. Participants have until December 1, 2026, to build and submit games, with voting concluding January 1, 2027. The event en…