Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

Hackers Claim French Employment Leak Exposes Over 1M Records, Health Data

Hackers claim 1M+ records tied to French employment apps were exposed, including HR files, health data, worker details, and plaintext passwords.
Inc

My Employee Is Abusing His Disability Accommodations and Brags About It. How Do I Handle This?

We’ve been having major issues with an employee, James. We hired him knowing of his disability, gastrointestinal issues, and have made all reasonable accommodations. He works by the bathroom, and he ...
Ars Technica

AI costs how much? GitHub Copilot users react to new usage-based pricing system.

In April, GitHub announced that it was moving subscribers from request-based billing to a usage-based model for its AI-powered Copilot service. As that new pricing model goes into effect today, many ...
Bloomberg L.P.

Walmart Caps Usage of an AI Tool for Employees After High Demand

Walmart Inc. is limiting staff’s usage of an artificial-intelligence tool following high demand, illustrating how corporations are adjusting their calculations for incorporating the technology. The ...
NBC Bay Area

Google employee charged with using confidential search data to make $1.2 million on Polymarket

U.S. prosecutors slapped insider trading charges against a Google employee this week, alleging the software engineer used confidential company information to pocket more than $1.2 million from ...
Yahoo

Google employee charged with using inside information to make $1M on Polymarket

Add Yahoo as a preferred source to see more of our stories on Google. A Google employee fraudulently made more than $1 million by using inside information to place Polymarket bets on what users were ...
Wired

Google Security Engineer Arrested in Million-Dollar Polymarket Trading Scheme

According to federal prosecutors, Michele Spagnuolo made more than $1 million on the prediction market platform using confidential information about Google Search traffic. Spagnuolo is charged with ...
The Washington Post

Google engineer charged with using inside information to win $1.2M on Polymarket

A software engineer at Google unlawfully used confidential company information to make a series of bets that won him about $1.2 million on the online prediction market Polymarket, the Justice ...
SiliconANGLE

GitHub confirms breach of 3,800 internal repos after employee installs poisoned VS Code extension

Hackers exfiltrated roughly 3,800 of GitHub Inc.’s internal code repositories after one of its employees installed a poisoned Visual Studio Code extension, the Microsoft Corp.-owned developer platform ...
VentureBeat

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...