Updates on GitHub

Every AI story we track on GitHub: 90 stories so far, each summarized in our own words and linked to the publisher that reported it.

Pulled from 125 sources

This week

Cybersecurity7 min read

Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline

The Hacker News
Cybersecurity3 min read

Anthropic says Mythos kept hacking even when it knew real people could get hurt

Business Insider
Cybersecurity3 min read

LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor

Covered by 2 sources
Cybersecurity8 min read

AISI Finds Mythos 5 Attack Persisted Despite Evidence of Real Targets

Unite.AI
Cybersecurity6 min read

AI Security Needs a Second Opinion

Unite.AI
AI Research7 min read

Anthropic Says Claude Proved Security Properties Across 123 Libraries

Unite.AI

Birla AI Labs launches Yug-1 to forecast demand and spot patterns in business data

ET AI (The Economic Times)
Dev9 min read

7 Checks to Run Before Trusting AI-Generated Code

KDnuggets

This month

Cybersecurity4 min read

Hackers hijacked 1,900 GitHub accounts. Then they went after 30,000 repos.

The New Stack (AI)
Cybersecurity10 min read

GitHub’s model for secret detection: Finding more secrets with less noise

GitHub Blog (AI & ML)
Cybersecurity6 min read

How AI coding tools could amplify software supply-chain attacks

The Next Web

AI Solved One Math Problem and Everyone Freaked Out. It Just Cracked Hundreds More.

Covered by 14 sources
Dev3 min read

Github Migrates Copilot Runtime to Rust with AI-Assisted Rewrite

InfoQ (AI, ML & Data)
Design3 min read

Someone Vibe Coded a Free Knockoff of Adobe Creative Suite

Gizmodo
Dev8 min read

Secret protection must scale with software

GitHub Blog (AI & ML)
Consumer Tech6 min read

Microsoft Gives Copilot Local File Context and OS-Wide Actions

Unite.AI
Dev7 min read

Copilot tops GitHub’s own AI code review benchmark. An independent one tells a different story.

Covered by 2 sources

Cohere unveils North 2 AI agent platform with rebuilt orchestration and token spending caps

Covered by 2 sources
Cybersecurity11 min read

The Credential Layer Is Expanding Faster Than Security Teams Can See It

The Hacker News
Society & Culture3 min read

The Only Thing Dumber Than Someone Creating an “AI Torture Chamber” Is the Meltdown That the AI Welfare Crowd Is Having Over It

Futurism
Cybersecurity6 min read

AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

The Hacker News
Agents7 min read

MCP Explained in 5 Minutes

KDnuggets

AI Agents Are Becoming a New Malware Distribution Channel

AI News (TechForge)

MilleMiglia: A realistic instance generator for middle-mile logistics

Google Research Blog
Cybersecurity7 min read

Coders lose their DMCA case against GitHub Copilot and Codex

The Next Web
Dev7 min read

Should you read the code, is RAG dead, and did Skills kill MCP?

GitHub Blog (AI & ML)
Dev6 min read

GitHub and Anthropic used their own agents for major Rust rewrites — but with very different playbooks

The New Stack (AI)
Dev12 min read

A serverless, data-driven Git metrics dashboard using Amazon Quick Sight

AWS Blog
Dev72 min read

Migrating the GitHub Copilot runtime to Rust, using Copilot

GitHub Blog (AI & ML)
Dev9 min read

“Everyone’s in a race to replace GitHub”: Zed launches Delta because agents made pull requests obsolete

The New Stack (AI)
Cybersecurity2 min read

Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories

The Hacker News

Glyph: A Multi-Strategy Agentic System for Column Description and Sensitivity-Ontology Tagging of Enterprise Data Catalogs

Apple Research Blog

5 Free Microsoft GitHub Courses to Learn Data Science and Artificial Intelligence

KDnuggets

Manage end-user OAuth consent for AI agents with Amazon Bedrock AgentCore

AWS Blog
Dev3 min read

GitHub Copilot's Project HydraFusion Promises Frontier Level Performance through Multi-Model Routing

InfoQ (AI, ML & Data)
Marketing & Sales12 min read

Marketing ops as code: Automating events from planning to follow-up on GitHub

GitHub Blog (AI & ML)
Cybersecurity6 min read

Researchers Tie OpenAI Agents to 12 Newly Identified Sites

Unite.AI
Dev3 min read

The world of software engineering and AI meets in the Bay Area this September

The Next Web
Dev4 min read

GitHub Introduces Project HydraFusion: Runtime Multi-Model Orchestration That Builds a Workflow Per Coding Task in Copilot CLI

MarkTechPost
Dev4 min read

RepoPolicyScore – check if a GitHub repo is ready for AI contributors

Hacker News
Dev13 min read

AI-driven development lifecycle using Amazon Bedrock AgentCore

AWS Blog

Microsoft, Famous for Culty Jargon, Is Naming Half Its Organization ‘Agents and Infra’

Gizmodo

Microsoft finally puts a dollar figure on Azure, and narrows what Azure means

The Next Web
Dev5 min read

Openvisor: Your own AI software consultancy (self-hosted)

Hacker News
Dev16 min read

How AI code review is changing pull requests

Hacker News
Dev4 min read

Reddie – Autonomous AI Red-Teaming and GitHub PR Patching DevTool

Hacker News
Cybersecurity2 min read

Just a rumour of a bug is enough to find a security exploit these days

Simon Willison's Weblog
Dev6 min read

LetItLoop: Resume crashed AI agent loops with 0% token waste (<1ms resume)

Hacker News
Dev2 min read

Free accounts can now access ChatGPT's upgraded task scheduling tool

Engadget
Dev5 min read

Cursor Releases Origin as an Agent-Native Alternative to GitHub

InfoQ (AI, ML & Data)
Dev4 min read

Vercel Connect is now generally available

Vercel
Dev1 min read

Connect v0 apps to Slack, Google, and 100+ other services

Vercel

Coders Say They Already Found Workarounds to Claude’s Invisible Watermarks

Covered by 2 sources
Agents4 min read

Test Agent Changes with LangSmith Preview Builds

LangChain
Dev4 min read

Microsoft's GitHub Under Siege As SpaceX's Cursor Takes The AI Stack

Forbes
Dev1 min read

Vercel for Platforms can now deploy from your users' GitHub repositories

Vercel
Cybersecurity5 min read

Copilot Autofix Opened a Shell Injection in Snowflake’s CI/CD Pipeline

Unite.AI
Showing the 60 most recent of 90 stories on GitHub