Linux Flaws Expose Critical Infrastructure to Root Command Execution
GitHub confirmed that a compromised employee device, infected by a poisoned Nx Console VS Code extension, led to the theft of around 3,800 internal repositories, sparking swift action to contain the breach and protect sensitive data. The incident highlights the vulnerability of even the most secure systems to supply…
#GithubBreach #SupplyChain #EmergingThreats #CodeExfiltration #ThreatActorTeampcp
GitHub Breach Exposes 3,800 Repos to TanStack Supply-Chain Attack
A single malicious Visual Studio Code extension, Nx Console version 18.95.0, was enough to spark a GitHub breach that exposed 3,800 internal repositories to a TanStack supply-chain attack. The poisoned extension was live on marketplaces for just 54 minutes, but long enough to steal credentials from a developer's machine.
#GithubBreach #SupplyChain #VisualStudioCode #MaliciousExtension #EmergingThreats
GitHub Breach Exposes 3,800 Repositories via Malicious VS Code Extension
GitHub's security chief confirms that customer data remains safe, with no evidence of impact outside of GitHub's internal repositories. The breach originated from a poisoned VS Code extension installed on a compromised employee device, allowing attackers to steal credentials.
#GithubBreach #MaliciousVsCodeExtension #SupplyChain #EmergingThreats #CredentialTheft
GitHub Breach Exposes 3800 Internal Repositories to Malicious VS Code Extension
GitHub's security team swiftly contained a breach that exposed 3,800 internal repositories to a malicious VS Code extension, and immediately took action to prevent further damage. The company has completed critical secret rotations and is now meticulously analyzing logs to ensure the incident is fully…
#GithubBreach #MaliciousVsCodeExtension #SupplyChain #EmergingThreats #RepositoryBreach
GitHub Breach Exposes 3,800 Repos via Malicious VSCode Extension
GitHub recently uncovered a sneaky attack involving a tainted VS Code extension that compromised an employee's device, putting 3,800 repositories at risk. The breach was quickly contained, but not before some internal repositories were exfiltrated.
#GithubBreach #MaliciousVscodeExtension #SupplyChain #EmergingThreats #RepositoryExfiltration
Grafana GitHub Breach Exposes Source Code in TanStack npm Attack
Grafana Labs recently reported a security breach that exposed source code and internal data, but fortunately, there's no evidence that customer production systems were compromised. The breach, detected on May 11, was confined to the company's GitHub environment and involved both public and private source code and internal repositories.
#GithubBreach #Grafana #Tanstack #NpmAttack #SourceCodeExposure
Grafana Labs Hit by GitHub Breach, Code Stolen in Ransom Demand
Grafana Labs sprang into action after a security breach at GitHub compromised its code, swiftly invalidating leaked credentials and bolstering defenses to prevent further unauthorized access. The company quickly responded to the breach, taking crucial steps to safeguard its environment.
#GithubBreach #RansomwareDemand #CodeTheft #SupplyChain #EmergingThreats
Salesloft confirms breach via GitHub → attackers stole Drift OAuth tokens & compromised Salesforce integrations.
Victims include Cloudflare, Zscaler, Palo Alto, Tenable, Rubrik, Proofpoint, Elastic & more (700+ orgs).
Experts: Non-human identities like API tokens are the next security blind spot.
💬 How is your org tackling API token risks? Follow @technadu for updates.
#Salesloft #GitHubBreach #CyberAttack #DataExposure #ThreatActor #CyberSecurity #SupplyChainRisk
Analyst207
TechNadu