Cybersecurity
One-Click VS Code Attack Exposes GitHub OAuth Tokens
Cybersecurity researchers have disclosed a one-click attack via Microsoft Visual Studio Code (VS Code) that makes it possible to steal a user's GitHub token. "J
#github
6 articles
Cybersecurity
Grafana Labs GitHub Breach: Source Code Exposed in npm Attack
Grafana Labs, on May 19, 2026, said an investigation into its recent breach found no evidence of customer production systems or operations being compromised. It
Cybersecurity
GitHub Probes Unauthorized Access to 4,000 Internal Repositories
GitHub on Tuesday said it's investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP listed the platform
Cybersecurity
GitHub Patches Critical RCE Vulnerability Affecting Private Repos
In early March, GitHub patched a critical remote code execution vulnerability (CVE-2026-3854) that could have allowed attackers to access millions of private re
Cybersecurity
Checkmarx Confirms LAPSUS$ Group Leaked Stolen Source Code
Application security company Checkmarx has confirmed that the LAPSUS$ threat group leaked data stolen from its private GitHub repository. [...]
Cybersecurity
North Korean Hackers Weaponize GitHub for Covert Attack Operations
Threat actors likely associated with the Democratic People's Republic of Korea (DPRK) have been observed using GitHub as command-and-control (C2) infrastru