[deleted]
GitHub is investigating unauthorized access to their internal repositories
11–20 of 359 posts
Re: GitHub is investigating unauthorized access to their internal repositories
#12non-twitter link: https://xcancel.com/github/status/2056884788179726685#m
Re: GitHub is investigating unauthorized access to their internal repositories
#13between all the Linux LPEs and Claude's known security flaws, alone, I'd be shocked if Github and Microsoft hadnt gotten hacked by now. reasonable bet we mainly hear it when big shops get bit
Re: GitHub is investigating unauthorized access to their internal repositories
#14GitHub: "We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity."
Re: GitHub is investigating unauthorized access to their internal repositories
#15Are they required to announce that they're being hacked in real time?
Re: GitHub is investigating unauthorized access to their internal repositories
#16- Use Static analysis for GHA to catch security issues: https://github.com/zizmorcore/zizmor - set locally: pnpm config set minimum-release-age 4320 # 3 days in minutes https://pnpm.io/supply-chain-security for other package managers check: https://gist.github.com/mcollina/b294a6c39ee700d24073c0e5a4e... - add Socket Free Firewall when installing npm packages on CI https://docs.socket.dev/docs/socket-firewall-free#git…
You also need to make sure you take care using PR titles and descriptions in your GHA because if they contain `text` it *may be executed lmfao. edited: not "will", may depending on your GHA
Can you cite this? It's not YAML execution syntax, surely Github doesn't do it, the only vector I can see is if you put it unquoted into a shell script inside of a GHA yaml.
Re: GitHub is investigating unauthorized access to their internal repositories
#17Is it just me or is this happening way more frequently in the last 4 or 5 months? Coincidently around the same time the models got a lot more capable?
It's more likely that it isn't coincidental at all: software development-oriented LLMs became a lot better towards the end of 2025, and so there's a non-zero chance that people are using them to find new security exploits.
(People are not sleeping on this and it is not something people have failed to notice. I don't use LLMs at all and even I have noticed it - largely because there is approximately nobody that isn't talking about it.)
Re: GitHub is investigating unauthorized access to their internal repositories
#18The security issue aside, seeing more companies push announcements like these on X as the only official source is a trend I'm not sure I like.
I can understand the rationale, this feels lighter and not something that belongs on status.github.com or the blog. Maybe what's actually missing is an official channel for ephemeral stuff on a domain they own, somewhere between a status page and a tweet? Just sharing an observation.
Re: GitHub is investigating unauthorized access to their internal repositories
#19Are they required to announce that they're being hacked in real time?
Microsoft owned so many a CYA to explain why the liability insurance goes up to investors?
Re: GitHub is investigating unauthorized access to their internal repositories
#20Is it just me or is this happening way more frequently in the last 4 or 5 months? Coincidently around the same time the models got a lot more capable?
[dead]