[Heads Up] GitHub Breach Shows Developer Tools Are Social Engineering Targets

Read the original article at https://blog.knowbe4.com/heads-up-github-breach-shows-developer-tools-are-social-engineering-targets

GitHub disclosed that attackers accessed its internal repositories after compromising an employee device through a poisoned Visual Studio Code extension. The company said the activity appears limited to GitHub-owned internal repositories, with the attacker’s claim of roughly 3,800 repositories being “directionally consistent” with its investigation. GitHub also said it found no evidence that customers’ own enterprises, organizations or repositories were impacted.

Read the original article at https://blog.knowbe4.com/heads-up-github-breach-shows-developer-tools-are-social-engineering-targets