GitHub shipped mandatory 2FA for all organization owners and secret scanning MCP Server integration

<cite index="5-4,5-5">Microsoft disclosed CVE-2026-41109 on May 12, 2026, a security feature bypass in GitHub Copilot and Visual Studio Code that allows local attackers to circumvent AI content filters and consent mechanisms. The vulnerability, rated Important with a CVSS score of 7.8, shifts attack vectors to the developer workstation, enabling malicious suggestion injection, data leakage, and stealth disabling of telemetry controls.</cite> <cite index="5-6">Patches are available in VS Code 1.97.0 and Copilot extension v1.43.20260512, with recommended immediate updates.</cite>

<cite index="4-2,4-3">GitHub has announced the general availability of secret scanning support through its MCP Server, extending automated credential detection and remediation capabilities into AI-assisted and agent-driven development workflows. The update is designed to help organizations identify exposed secrets - such as API keys, tokens, and credentials - earlier in the software lifecycle, while enabling AI tools and external systems to interact with GitHub security findings in a more structured and automated way.</cite> <cite index="4-4,4-5">The release reflects a growing industry focus on securing AI-enhanced software delivery pipelines, where autonomous agents and AI coding assistants increasingly generate, modify, and interact with source code at scale.</cite>

<cite index="1-1,1-2">GitHub detailed a defense-in-depth security architecture for agentic workflows in CI/CD pipelines, focusing on isolation, constrained execution, and auditability. The design aims to safely integrate autonomous AI agents while mitigating risks like prompt injection, privilege escalation, and unintended actions, using sandboxed environments, restricted permissions, and full execution traceability.</cite> <cite index="1-19,1-20">Agentic workflows extend traditional automation by enabling AI agents to interpret intent, make decisions, and execute tasks within GitHub Actions. While this introduces productivity gains, it also expands the attack surface, including risks such as prompt injection, privilege escalation, and unintended actions.</cite>

<cite index="23-37,23-38">Admins can now create IP allowlist policies that restrict access to Atlassian apps by approved countries, as well as IP addresses. This enhancement helps organizations strengthen security and support compliance and migration needs by limiting access based on country of origin across Jira, Confluence, Atlassian Analytics, Compass, and Rovo.</cite> <cite index="23-1,23-2">Between today and May 19, 2026, we'll gradually roll out data contribution settings in Atlassian Administration.</cite>

<cite index="28-1,28-2">ISO is aware of a vulnerability that affects Confluence Data Center and Server. CVE-2025-64756 is a high-severity OS Command Injection vulnerability that allows an authenticated attacker to gain access and possibly execute arbitrary commands on the target system.</cite> This represents a critical security risk for organizations running on-premises Confluence instances and requires immediate attention for data protection strategies.

<cite index="33-4,33-5">DevOps Threats Unwrapped Report 2026 reveals a sharp surge in disruption across leading DevOps platforms. In 2025 alone, 607 incidents were recorded, totaling 9,255 hours and 26 minutes of impacted performance.</cite> <cite index="33-11,33-12">Bitbucket's most disruptive month was May, with five incidents resulting in over 84 hours of total impact, including a major 49-hour disruption affecting pipeline execution. In Jira, June recorded the highest number of incidents (nine), totaling nearly 48 hours of disruption.</cite> This data highlights critical reliability risks for DevOps data protection strategies.

<cite index="7-1,7-2">GitHub shipped 28 new secret detectors across 15 providers, expanded push protection to 39 token types, and added AI password detection.</cite> <cite index="7-9,7-10">But the number that matters more: 39 token types now have push protection enabled by default. That includes Airtable, AWS, Databricks, Datadog, Fastly, Heroku, HubSpot, LaunchDarkly, Netflix, Pinecone, Shopify, Sourcegraph, and Weights & Biases.</cite> The expansion represents GitHub's strategy to become the single pane of glass for developer security, directly competing with specialized data protection platforms.