GitHub Copilot

A malware campaign targeting Chinese-speaking users used trojanized SumatraPDF and GitHub infrastructure to deploy the AdaptixC2 agent and enable remote access via VS Code tunnels. Affected users are those who installed the trojanized software.

Threat actors are exploiting security vulnerabilities in Microsoft Defender to gain elevated system privileges, and two of the reported flaws were still unpatched at the time of the report. Users and organizations running Microsoft Defender may be affected.

OpenAI revoked its macOS app certificate after a GitHub Actions workflow inadvertently downloaded a malicious Axios library version in a supply-chain incident. No user data or internal systems were compromised.

A Ninth Circuit federal appeals case (24-7700) involves GitHub Copilot and OpenAI, with groups including the App Association and the Electronic Frontier Foundation participating and raising concerns about the AI service. The outcome and specific claims are not described in the available details.

A lawsuit (case 24-6136) is pending in the Ninth Circuit Court of Appeals involving OpenAI-related corporate entities. Limited public details are available on the allegations and current status.