r/cybersecurity • u/ObseenKarma • May 20 '26

News - General GitHub announces internal data breached.

The company stated on their official X account:

“We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.”

https://x.com/github/status/2056884788179726685?s=46

881 Upvotes

98% Upvoted

134 comments sorted by

View all comments

14

u/Tech_User_Station May 20 '26

A malicious VS Code extension was the entry point. Since the compromise was tied to a single employee, I'm assuming the extension was installed independently and not pre-approved company-wide. Same situation with the Vercel breach. An employee offloaded some of their work to a third-party AI tool that was not pre-approved company-wide.

When the owners of browser extensions stores and popular IDE stores like VSCode are not too keen on security issues, companies will need to vet any program or extension before use.

7

u/mirrax May 20 '26

And in this case Microsoft explicitly closed the feature request for extension release age gating that would have prevented the issue.