How we built enterprise search to be secure and private 
Finding leaked passwords with AI: How we built Copilot secret scanning 
Disrupting malicious uses of AI 
Protecting user data through source code analysis at scale - Looking back at our Bug Bounty program in 2024
- How GitHub uses CodeQL to secure GitHub
Did Semgrep Just Get A Lot More Interesting? - VSCode’s SSH Agent Is Bananas
- Cyber threat actors: AI-assisted intrusion research
- Operation “Sponsored Discontent”: Influence activity
- Deceptive Employment Scheme: AI-assisted hiring deception
- Romance-baiting scam: AI-assisted pig butchering workflows
- Iranian influence nexus: Cross-platform activity
- Covert influence operation: Ghana election activity
- Task scam: AI-assisted fake review jobs
- Operation “Peer Review”: AI-assisted surveillance planning
- OpenAI o3-mini System Card
Mitigating Denial of Wallet risks with Vercel - Operator System Card
- Trading inference-time compute for adversarial robustness