GitHub Issues Abused in Copilot Attack Leading to Repository Takeover

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GitHub Copilot Attack Exploits Issues for Repository Takeover A cybersecurity incident has emerged where attackers exploited GitHub Issues to inject malicious instructions that are processed by Copilot during the launch of a Codespace. This attack leverages the zero-day vulnerability CVE-2026-22769, which was recently exploited by a Chinese cyberespionage group. Affected users may face repository takeovers due to this exploitation. 3 sources 35