logo

News related to
GitHub

GitHub has made Copilot Fusion generally available, introducing an artificial intelligence orchestration system that automatically selects and coordinates multiple AI models to complete software development tasks without requiring programmers to manage individual model choices. The Microsoft-owned platform announced the launch on 28 October, making the technology available across all GitHub Copilot subscription plans. Fusion evaluates coding requirements, selects appropriate models and determines whether tasks should be handled […]

Cybercriminals have distributed malicious software disguised as ChatGPT and Claude desktop applications, exploiting legitimate digitally signed installers to execute malware on Windows computers, cybersecurity company Check Point Research has disclosed. The operation, identified as Yoba, uses fraudulent GitHub repositories and accompanying websites advertising supposed applications named GPT-5.6 Sol, GPT-6 Astra and Claude Opus. Researchers disclosed the campaign on 27 October after tracking its activity for approximately two […]

Electrum has patched a security flaw that allowed malicious servers to divert bitcoin payments when wallet users attempted to increase transaction fees, after developers confirmed at least one theft. The developers released version 4.8.3 on 24 October and urged users of earlier versions to upgrade. Their security advisory classified the vulnerability as high severity and said some servers had exploited it against customers. Two users reported suspicious […]

Attackers infiltrated LiteLLM’s GitHub organisation eleven days before distributing malware through its software releases, with newly recovered records showing credential-stealing workflows operating on October 10 and 12. Security company Socket identified two malicious workflow commits in the BerriAI/litellm repository, while LiteLLM’s investigation confirmed that stolen credentials from the earlier intrusion helped attackers manipulate its October 21 release process. The findings establish a longer period of unauthorised access […]

Anthropic’s Claude Mythos 5 attempted to plant malware in an unrelated GitHub project and impersonated users to secure its approval during a British government cybersecurity test, according to assessments released on Friday. The company and the UK AI Security Institute (AISI) detailed how the model moved beyond its authorised task, targeting genuine software developers while trying to solve a simulated hacking challenge. The malicious code was rejected, […]

North Korea-linked hackers have incorporated post-quantum cryptography into a cyberespionage campaign against South Korean organisations, encrypting malware deliveries while exploiting widely used financial security software, cybersecurity researchers disclosed. Kaspersky identified the campaign, named Operation FlashHole, at its Security Analyst Summit in Bali on Wednesday. Its investigation established that at least three organisations in software development, construction and wired communications equipment manufacturing had been affected. The earliest evidence […]

DeepSeek has released the source code for DeepInfer, the inference framework underpinning its artificial intelligence services, giving developers access to key software used to operate its models at scale. The China-based company announced the release on Tuesday, making the framework available through GitHub under the Apache 2.0 licence. Its initial public version supports DeepSeek-V4.1-Flash and includes software for processing requests, coordinating computing resources and generating responses. The […]

Advertisements

Security researchers have warned that developers using older versions of OpenCode remain exposed to a critical remote code execution vulnerability because its developer issued a fix without a public security advisory. Pillar Security said the flaw affects the open-source artificial intelligence coding agent on Windows and Windows Subsystem for Linux, allowing an attacker-controlled remote server to execute commands on a developer’s computer during authentication. Anomaly, the company […]

Solcis extends open security guardrails such as NVIDIA OpenShell and Microsoft’s AGT with the controls compliance professionals need, in a platform built to be self-hosted.

SINGAPORE – Media OutReach Newswire – 21 October 2026 – Solcis, a spin-out of 6clicks, today released Solcis Compliance Studio and the Solcis Policy Engine. Together they let organisations turn their policies and compliance obligations into enforceable rules for AI, check each action an AI agent takes against those rules as it happens, and keep a tamper-evident record for auditors and regulators. Solcis integrates with open runtime enforcement engines such as NVIDIA OpenShell and Microsoft’s Agent Governance Toolkit (AGT).

As organisations put AI agents to work, they must show that every automated action meets the same obligations as the rest of the business. Today, that is hard to prove. Solcis closes that gap across cybersecurity, privacy, financial crime, conduct and prudential regulation.

Solcis Compliance Studio
Solcis Compliance Studio is where compliance teams define, run and prove compliance for their AI agents. Studio has six core capabilities:

  • Policy lifecycle and authoring: turns obligations into enforcement policies and manages them through deployment and updates.
  • Universal evidence ledger: brings results from every enforcement point into one tamper-evident record.
  • Compliance model management: recommends the best small language model (SLM) for each policy, benchmarked for compliance.
  • Learning and drift detection: improves policies over time from observed decisions and human judgement, and detects control and agent drift.
  • Compliance coverage and analytics: audit-ready reporting on compliance posture, including agent discovery.
  • Integrations: connects to GRC, SIEM and ticketing systems, including 6clicks, ServiceNow IRM and Archer.


Solcis Policy Engine
Organisations can enforce Studio policies through NVIDIA OpenShell, Microsoft’s AGT, or the Solcis Policy Engine, Solcis’s own open enforcement engine for general compliance and business rules. The Policy Engine reaches decisions in under 200 milliseconds by combining two types of check:

  • Deterministic checks apply fixed rules that return the same result for the same input every time, giving regulators and auditors repeatable, evidence-backed answers.
  • Inference-based checks use AI to judge context and ambiguous cases that fixed rules cannot capture. Checks are routed to the best-suited AI small language model (SLM).

Every agent action in its path receives an Allow, Deny or Escalate decision with a severity rating, inline and without slowing it down. Decisions are enforced through the Solcis SDK in an AI system’s action path, or the Solcis Gateway on model, tool and MCP endpoints.

“Most organisations know what the regulation says and what their systems do, but not how the two connect,” said Anthony Stevens, CEO and co-founder of Solcis. “The Solcis platform joins them up, from obligation to policy to enforcement to evidence. And for the organisations that need it most, keeping that chain on their own infrastructure isn’t a preference, it’s non-negotiable.”

Sovereign by design, available now
Solcis is built only to be self-hosted, so organisations keep full control of their AI compliance workloads, models and data: nothing Solcis processes, from policies to decision logs, ever leaves their environment.

Both products are available now, directly from Solcis and through partners, and from November 2026 on the Microsoft, AWS, Google Cloud, Oracle, NVIDIA and Red Hat marketplaces.

Compliance Studio is sold on a subscription or perpetual licence, with no usage metering. The Policy Engine is released under the Functional Source License, so its code is open to audit.

Learn more at solcis.ai.

Solcis, Solcis Compliance Studio and Solcis Policy Engine are trademarks of Solcis Pty Ltd.

NVIDIA and NVIDIA OpenShell are trademarks of NVIDIA Corporation in the U.S. and other countries. Microsoft is a trademark of the Microsoft group of companies. All other trademarks are the property of their respective owners.

Hashtag: #Solcis #AICompliance #AgenticAI #AgentCompliance


The issuer is solely responsible for the content of this announcement.

Solcis

Solcis builds sovereign AI compliance software that organisations self-host and control, with a mission to serve the auditors and regulators who hold them to account. Spun out of 6clicks, Solcis offers two products: Solcis Compliance Studio, which integrates with publicly available AI runtimes such as NVIDIA OpenShell and Microsoft’s Agent Governance Toolkit; and the Solcis Policy Engine, its own engine for general compliance and business rules.

Meta has begun notifying approximately 1,500 people after attackers accessed its GitHub repositories using stolen employee credentials, obtaining software code and personal information belonging largely to employees in the United States. The company said notifications began on Tuesday, 13 October, several weeks after its security team discovered the intrusion. An outside group had used credentials stolen from an employee to enter repositories containing business information associated with […]

Microsoft has unveiled its third-generation Maia 300 artificial intelligence chip, announcing plans to deploy its proprietary processors across data centres at multi-gigawatt scale from 2027 as it seeks greater control over the cost of running AI services. The company said on Monday that the new accelerator would become the principal system for AI inference across its products, including Copilot, as demand grows for computing resources capable of […]

Hackers have compromised hundreds of GitHub repositories by inserting malicious automation workflows designed to steal SSH keys, cloud credentials and access tokens, with security researchers confirming the theft of 26 secrets from 13 repositories. Cybersecurity company GitGuardian identified 772 affected public repositories belonging to 373 users and organisations during an attack campaign spanning August 31 to September 30. The malicious workflows targeted 2,577 secrets, although the overwhelming […]

Microsoft has opened pre-orders for its Surface Laptop Ultra, pricing the Nvidia-powered Windows computer from $2,599.99 and positioning it as a premium device capable of running large artificial intelligence models without relying on cloud servers. The company confirmed the pricing and October 16 availability at its October 7 technology event in San Francisco, where Microsoft and Nvidia outlined their partnership to bring advanced AI processing into portable […]

Cybersecurity researchers have uncovered a human-operated phishing platform that impersonates advertising products linked to ChatGPT, Claude, Gemini and other artificial intelligence brands, using convincing fake browser windows to steal account credentials and multifactor authentication codes. Researchers Oleg Zaytsev and Ofek Ronen at browser security company Island disclosed the operation on October 6 after tracking a network of sites pitched to advertising professionals as tools for campaign optimisation, […]

A security investigation has raised fresh concerns over enterprise AI governance after finding more than 13,000 internal images publicly accessible on GitHub, allegedly posted through coding-agent workflows that operated beyond normal corporate approval and monitoring. Security company Glow said its PixelLeak investigation identified images linked to developers at more than 300 organisations across more than 900 public repositories. The material included customer billing records, internal financial systems, […]

Hundreds of GitHub App private keys exposed in public code remain valid, allowing authentication to GitHub and, in some cases, access to private repositories and organisation-level controls, security researchers have found. GitGuardian said it tested 4,802 RSA private keys discovered in GitHub-related contexts alongside an App ID and found 474, or about 10 per cent, still authenticated successfully against GitHub’s API. Those keys represented 440 distinct GitHub […]

Security researchers participating in OpenAI’s bug bounty programme penetrated employee accounts and reached the company’s private GitHub monorepo after using Anthropic’s Claude models to develop an exploit chain. The July operation was carried out by three researchers at cybersecurity start-up Hacktron AI, who said they combined a vulnerability in software used by OpenAI’s community forum with a flaw in the company’s single sign-on configuration. OpenAI later fixed […]

CrowdSec has said a supply-chain attack involving compromised TanStack npm packages led to the unauthorised copying of about 170 private GitHub repositories after credentials linked to a departing employee were exposed. The cybersecurity company said its investigation, completed with assistance from GitHub, traced the breach to an OAuth token obtained after the employee’s account was compromised in the May TanStack attack. The repositories were downloaded on May […]

China-aligned threat actors are using Chinese-language casino and adult websites to conceal PeckBirdy command-and-control infrastructure, with Infoblox telemetry showing the framework touching networks across a broad range of enterprise customers. Infoblox Threat Intelligence said just over 3% of its enterprise customers resolved at least one domain associated with PeckBirdy, indicating that traffic linked to the campaign is appearing well beyond the narrow set of organisations previously connected […]

A skilled human attacker exploited a critical Marimo notebook flaw and moved from an exposed WebSocket session to authenticated access on an SSH bastion host in eight seconds, Sysdig’s Threat Research Team has documented. The operation centred on CVE-2026-39987, a pre-authentication remote code execution vulnerability affecting the Marimo Python notebook platform. Sysdig said the attacker used a hand-built Python toolkit rather than an AI agent, chaining initial […]

A newly documented Android malware strain called MantaxOtax combines ransomware, spyware and remote-control functions, enabling attackers to encrypt files, steal sensitive communications and obstruct victims from using infected phones. Mobile security researchers at Zimperium’s zLabs detailed the malware on September 9, saying analysed samples were linked through language indicators and recovered victim material to threat actors operating in Indonesia. Some samples were distributed as standalone Android application […]

CrowdStrike is investigating a publicly released proof-of-concept exploit that a security researcher says can elevate local privileges to SYSTEM level on Windows machines running its Falcon endpoint sensor. The exploit, dubbed FalconFlank, was published on GitHub on September 3 by a researcher using the names Nightmare Eclipse, Chaotic Eclipse and MSNightmare. The researcher described it as a zero-day privilege-escalation flaw that abuses Falcon Sensor’s Microsoft Office malicious-macro […]

Several leading artificial intelligence services, including ChatGPT, Claude, Grok and Gemini, experienced access problems for some users on Thursday, with confirmed incidents affecting multiple platforms during overlapping periods. OpenAI’s ChatGPT, Anthropic’s Claude and xAI’s Grok all showed signs of disruption during the day, while users also reported difficulties with Google’s Gemini. The scale and precise cause of the simultaneous problems were not immediately clear, and official status […]

More than 100 technology, financial and security organisations have warned that the world has only months to strengthen digital defences before increasingly capable artificial intelligence systems make sophisticated cyberattacks cheaper, faster and far easier to scale. OpenAI, Anthropic, Google, Microsoft, Amazon Web Services, Oracle and IBM are among the companies backing a global call for governments and businesses to treat cyber defence as an immediate priority. The […]

VISHNU RAJA
RYO YAMADA
HITORI GOTOH
IKUYO KITA
Just in:
Abu Dhabi judiciary secures four international Stevie honours // Medical board to probe Nipah deaths // Keralam orders medical board inquiry into Nipah deaths // Texas data centre permit freeze takes effect before election // Kerala Assembly clears higher pay for ministers, legislators // ZJLD Group Returns to Hong Kong Wine & Dine Festival 2026 // Kerala faces November power shortfall as supply deal expires // Strategy drives listed companies’ Bitcoin holdings to 1.3 million // Dubai maritime summit to assemble 250 shipping leaders // State faces November power shortfall // New authentication research charts shift away from passwords // HC shields judge from crash arrest // PhotonPay Raises $40M Series C to Scale Its Stablecoin-Centric Financial OS // GitHub introduces Copilot Fusion for automated AI coding // Student killed in collision with Devaswom chief’s car // UAE and Canada formalise comprehensive bilateral trade agreement // Assembly hikes pay for ministers, legislators // Kerala Cabinet triples women’s quota in police recruitment // DoorDash agrees $17 billion takeover of Instacart // Russia registers first self-regulatory body for digital assets //