Hackers stole data from 3,800 GitHub internal repositories
GitHub confirmed attackers used a poisoned VS Code extension to compromise an employee device and steal data from thousands of internal repos.
What happened
GitHub, owned by Microsoft, confirmed attackers stole data from about 3,800 internal repositories.
How
- A poisoned VS Code extension compromised an employee's device. GitHub didn't name it.
- Hacking group TeamPCP claimed credit and is reportedly selling the data on a cybercrime forum.
Customers
GitHub said it found "no evidence of impact to customer information stored outside of GitHub's internal repositories." The investigation is ongoing.
Tip
Only install VS Code extensions from sources you trust.
Founder and editor-in-chief of Kurd Developers. Phone and tech news on YouTube, Instagram and TikTok.
More stories
One text can break your phone: Android's 'SMS of Death' explained
A flaw in Android 12 and later lets a specially crafted SMS drop calls and even make a phone unusable. The fix is in October's security patch.
GTA VI lands November 19: prices, editions and what to know
Rockstar has locked the date: Thursday, November 19 on PS5 and Xbox Series X|S. Standard costs $79.99 and Ultimate $99.99.
Apple's first touchscreen MacBook Pro brings OLED and Dynamic Island
The new PROLED XDR display responds to touch, the notch is gone and Dynamic Island takes its place. Prices start at $2,899.
The $1,999 iPhone Duo Has a Black-Bar Problem, and Fixing It Is Harder Than It Looks
Apple's first foldable is a hardware flex. But unfold it and many of your apps shrink into a phone-shaped window floating in black. Here's why the app world wasn't ready, and why developers can't just hit "stretch".