GitHub Internals Breach via Poisoned VS Code Extension

GitHub Internals Breach via Poisoned VS Code Extension

On May 19, 2026, GitHub announced via X (formerly Twitter) an ongoing investigation into unauthorized access to its internal repositories. In a follow-up statement hours later, GitHub confirmed it had experienced a breach and assessed that threat actors had stolen source files and other sensitive data from around 3,800 of its internal repositories.

Authors: Taylor Alvarez, Isaac Ward Published: 05/29/2026

Other posts of interest...

Critical Vulnerabilities in Microsoft and Fortinet Products

1 min read

Critical Vulnerabilities in Microsoft and Fortinet Products

Published 04/13/2023 I. Targeted Entities Windows and Fortinet systems II. Introduction Several critical vulnerabilities were discovered in both...

Read More
Critical Vulnerability in Fortinet FortiManager Under Active Exploitation

1 min read

Critical Vulnerability in Fortinet FortiManager Under Active Exploitation

Originally published: 11/12/2024 I. Targeted Entities Fortinet FortiManager Customer Managed Service Providers II. Introduction A critical...

Read More