Investigation update: GitHub Enterprise Server signing key rotation

Source summary: May 26, 2026: GitHub recently detected a cyber-attack and immediately activated our response process to investigate, disrupt malicious activity, mitigate the attack, and deny the threat actor further access. It’s important to note that this investigation is still ongoing, and we will continue to provide details as appropriate. Given the reality of threat actors and the advent of AI technologies, we need to do all we can to protect our customers. Considering the repositories that have been attac…

Why it matters: Add your own practical explanation here before publishing.

What to do: Add recommended action/checks here.

Read the original source

Original source: GitHub Blog