CISA Warns of Supply Chain Attacks Targeting GitHub and Developer Tools
Multiple campaigns compromised CI/CD pipelines through malicious VS Code extensions and GitHub Actions workflows.
Tag: github
Microsoft Criticises Public Zero-Day Disclosures After GitHub Account Removal
Software giant reinforces coordinated disclosure policy following researcher's public vulnerability releases.
GitHub Internal Repositories Breached via Poisoned VS Code Extension
Employee device compromised through malicious Nx Console extension led to access of internal GitHub repositories.