Hundreds compromised daily in Microsoft device code phishes
… This makes it easy for the user to sign in, but it comes with a security tradeoff. …
Search
All sources
theregister.com
12
pcworld.com
10
bleepingcomputer.com
8
neowin.net
7
tweaktown.com
6
windowscentral.com
4
blogs.windows.com
4
hothardware.com
3
pcgamer.com
3
press.asus.com
3
extremetech.com
2
blogs.microsoft.com
2
Top stories
Russia's APT28 behind latest wave of router, DNS attacks
Cyber-crime Russia's Fancy Bear still attacking routers to boost fake sites, NCSC warns 200 orgs and 5,000 devices compromised so far in Vlad's latest intelligence grab, Microsoft reckons The UK's National Cyber Security Centre NCSC has issued a fresh warning about Russia's ongoing targeting of rou… …
Malicious VS Code Extension Linked to Theft of 3,800 GitHub Repositories
… Security researchers continue warning that many organizations still allow relatively unrestricted plugin installation across developer workstations. …
GitHub says hackers stole data from thousands of internal repositories | TechCrunch
… Zack Whittaker Zack Whittaker is the security editor at TechCrunch. He also authors the weekly cybersecurity newsletter, this week in security . …
Unknown attackers exploit another critical SharePoint bug
… In October, we learned that other Beijing crews – including Salt Typhoon – also joined in the attacks. ® security microsoft cybersecurity and infrastructure security agency cybercrime cyber-crime
Microsoft, CISA warn on flaw affecting miilions of systems running major Linux distros
… Known issues The linux foundation Security flaw Microsoft Security vulnerability Cisa Lpe Red hat Escalation of privilege vulner Ubuntu Root Linux bug Known issues Security flaw Security vulnerability Lpe Escalation of privilege vulner Report a problem with this article
GitHub links repo breach to TanStack npm supply-chain attack
… "One of our developers was compromised by a recent supply-chain compromise on Tanstack, which leaked their GitHub credentials through the GitHub CLI gh . …
GitHub Breach Exposes 3,800 Internal Repos via Poisoned VS Code Plugin
… Tags: Malware , security , cybersecurity , GitHub Alan Velasco When Alan isn’t watching his favorite streamers on Twitch he’s writing about tech, gaming and cybersecurity. …
Microsoft Self-Service Password Reset abused in Azure data theft attacks
… Microsoft's report provides indicators of compromise for the observed attacks along with extensive mitigation and protection guidance. …
GitHub confirms breach of 3,800 repos via malicious VSCode extension
… The company has since removed the unnamed trojanized extension from the VS Code marketplace and has secured the compromised device. "Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. …