GitHub's MCP Apps extend MCP to let server tools return interactive HTML UIs rendered in sandboxed VS Code chat iframes. Shopify, Excalidraw, and Figma are live adopters.
GitHub confirms ~3,800 internal repositories breached after an employee installed a malicious VS Code extension. Threat group TeamPCP claimed responsibility for the supply-chain attack.
Hackers breached Grafana's GitHub environment and demanded ransom to withhold the codebase — Grafana refused to pay, with potential supply-chain exposure for production users.
GitHub's April uptime hit ~86% after three major incidents in one week; Mitchell Hashimoto left for Ghosty and Zig already migrated.
GitHub CLI now collects pseudonymous telemetry by default — no opt-in offered — affecting all users globally and requiring active opt-out to disable.
Curated AI insights — sent when there's something worth your inbox.