GitHub Internals Breach via Poisoned VS Code Extension

Picture of Cyber Florida SOCAP Team Cyber Florida SOCAP Team : Updated on September 16, 2026

threat advisory supply chain attack
GitHub Internals Breach via Poisoned VS Code Extension

On May 19, 2026, GitHub announced via X (formerly Twitter) an ongoing investigation into unauthorized access to its internal repositories. In a follow-up statement hours later, GitHub confirmed it had experienced a breach and assessed that threat actors had stolen source files and other sensitive data from around 3,800 of its internal repositories.

Authors: Taylor Alvarez, Isaac Ward Published: 05/29/2026

Other posts of interest...

Vercel OAuth Supply Chain Compromise

1 min read

Vercel OAuth Supply Chain Compromise

Picture of Cyber Florida SOCAP Team Cyber Florida SOCAP Team : September, 16, 2026

threat advisory supply chain attack
Read More
Critical Vulnerabilities in Microsoft and Fortinet Products

1 min read

Critical Vulnerabilities in Microsoft and Fortinet Products

Picture of Cyber Florida SOCAP Team Cyber Florida SOCAP Team : August, 13, 2026

Published 04/13/2023 I. Targeted Entities Windows and Fortinet systems II. Introduction Several critical vulnerabilities were discovered in both...

threat advisory remote code execution
Read More
Chrome Zero-Days Threat Advisory

1 min read

Chrome Zero-Days Threat Advisory

Picture of Cyber Florida SOCAP Team Cyber Florida SOCAP Team : September, 16, 2026

Originally Published April 1, 2026

threat advisory zero day
Read More