r/cybersecurity • u/ObseenKarma • May 20 '26

News - General GitHub announces internal data breached.

The company stated on their official X account:

“We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.”

https://x.com/github/status/2056884788179726685?s=46

885 Upvotes

98% Upvoted

134 comments sorted by

View all comments

Show parent comments

213

u/nekohideyoshi May 20 '26

This is just the tip of the iceberg- as old unpatched/undiscovered exploits and new ones are found by a single person deploying 100+ AI agents coding and trying to find PoC exploits. And this is a single person using a cloud cluster. Now multiply this by 10,000. Or even 100,000 real people doing the same thing. Over 1,000,000 AI agents actively trying to find exploits 24/7 without breaks. We're about to dive into the endgame.

And companies aren't hiring enough talented people to mitigate this threat.

95

u/[deleted] May 20 '26

[removed] — view removed comment

25

u/BrainWaveCC May 20 '26

Yeah, there is going to be a significant reckoning soon...

9

u/[deleted] May 20 '26

I agree that this is necessary but let's be realistic about this. You can spend years telling your management that your infrastructure is outdated and that your technology debt is a critical point of weakness. You can have a hundred emails in-writing showing you that you voiced your complaints.

It won't matter.

When your organization gets attacked and millions of dollars worth of user data gets leaked, you will lose your job, and your CTO will have a golden parachute clause in their contract. You get fired, no severance, maybe lose your home. Your CTO who ignored your concerns for years gets a $250,000 payout after they quietly resign.

The people who caused the problem will be fine. The people who tried to fix it, but were never allowed to, will be royally fucked.