GitHub users have been receiving email notifications this week urging them to address a bogus "security vulnerability" in a project repo that they have contributed to, or are otherwise subscribed to.

Microsoft’s Copilot AI assistant is exposing the contents of more than 20,000 private GitHub repositories from companies including Google, Intel, Huawei, PayPal, IBM, Tencent and, ironically ...