42Crunch has launched an API Security Testing Plugin for GitHub Copilot, enabling developers to audit, test and remediate API security vulnerabilities within AI-assisted development workflows. The plugin addresses growing concerns that AI-generated code often contains security flaws, with Veracode reporting 45% of AI-generated code includes known OWASP Top 10 vulnerabilities. The plugin continuously audits OpenAPI specifications, detects security vulnerabilities, identifies OWASP API Security Top 10 risks, and provides AI-assisted remediation guidance. It aims to ensure security validation scales alongside AI-assisted development rather than becoming a bottleneck. CEO Jacques Declas stated organisations need "deterministic security guardrails that can validate, govern and remediate API security issues at the same speed AI generates them". The plugin is now available to 42Crunch's user base of over two million developers.

GitHub's npm package registry has introduced staged publishing, a security measure requiring maintainer approval before package distribution. The feature, now merged into npm CLI v11.15.0, addresses supply chain vulnerabilities where attackers compromise maintainer accounts to distribute malware through widely used packages. Staged publishing allows developers to submit packages to a staging area using "npm stage publish" rather than publishing directly. A maintainer must then review and approve the package via two-factor authentication before it becomes publicly available. The feature particularly benefits automated workflows, which typically lack 2FA authorization and rely on tokens that can be stolen. Combined with GitHub's trusted publishing using OpenID Connect authentication, staged publishing strengthens the software supply chain, provided developers implement these tools.

Microsoft's $7.5 billion GitHub acquisition in 2018 is proving "one of the best technology acquisitions of the last decade", according to analyst Trey Lockerbie. Since closing, Microsoft shares have returned 340%, reaching $415.40 as of 8 May. Nearly 140,000 organisations now use GitHub Copilot Enterprise, tripling year-over-year, whilst Microsoft's AI business hit a $37 billion annual revenue run rate, up 123% year-over-year. GitHub's usage-based pricing launches 1 June 2026. The platform hosts 100 million registered developers, creating a flywheel effect where developers choosing GitHub subsequently drive Azure cloud adoption. Microsoft reported Q3 FY26 revenue of $82.89 billion, up 18% year-over-year, with earnings per share of $4.27 beating estimates of $4.07.