A new malicious framework called OkoBot is delivering more than 20 payloads in attacks focused on stealing cryptocurrency ...

The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output ...

A critical prompt injection vulnerability in GitHub Agentic Workflows could allow unauthenticated attackers to leak private repository data, ...

A researcher proved Grok Build CLI sent full repos, 27,800x more data than the task needed, to a Google Cloud bucket. xAI had said no code was transmitted.

GitHub Inc.’s new Agentic Workflows feature that allowed an unauthenticated attacker to siphon data from private code ...

Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software ...

xAI open-sourced its Grok Build terminal coding agent on Wednesday under the Apache 2.0 license, releasing 844,530 lines of Rust to GitHub hours after the tool's covert full-repository upload behavior ...

Noma Labs tricked GitHub's AI agent into leaking private repositories with a crafted issue. The prompt-injection flaw, GitLost, has no code fix.

Elon Musk has pledged that X’s codebase will be made open source days after it was discovered that the platform’s Grok coding ...

Token-Efficient Operational Format Delivers up to 50% Greater Efficiency while Supporting Governed, Traceable AI ...

Apple acquired observability platform SigScalr as the tech giant looks to expand its telemetry talent base across the U.K.

GitHub Copilot security review launched in the desktop app July 14, giving all subscribers — Free tier included — AI-driven ...