Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

[Heads Up] GitHub Breach Shows Developer Tools Are Social Engineering Targets

GitHub disclosed that attackers accessed its internal repositories after compromising an employee device through a poisoned Visual Studio Code extension. The company said the activity appears limited to GitHub-owned internal repositories, with the attacker’s claim of roughly 3,800 repositories being “directionally consistent” with its investigation. GitHub also said it found no evidence that customers’ own enterprises, organizations or repositories were impacted.

GitHub internal repositories breached

A malicious VS Code extension led to cloned private repositories, reportedly offered for sale on a criminal forum On May 19-20, 2026, GitHub confirmed a security incident affecting its own internal systems. A threat actor self-identifying as TeamPCP, also tracked as UNC6780, compromised an employee’s developer device by way of a malicious Visual Studio Code extension and used that foothold to clone roughly 3,800 of GitHub’s internal repositories.

The New CISO Ep. 145 - Eric O'Neill | Lessons From a Spy Hunter: The Real Cost of a Breach (Part 1)

What does it feel like to stand in the smoking ruin of a ransomware attack? In this episode, Steve Moore is joined by former FBI undercover operative Eric O'Neill—the man who helped capture Robert Hanssen—to explain why modern cybercrime is just traditional espionage repackaged, and why the dark web has quietly become the world's third-largest economy.

What You Need to Know about the BWH Hotels Data Breach

BWH Hotel Group is one of the world's largest hotel networks, operating more than 4,000 hotels in over 100 countries. The company evolved from Best Western and today manages a multi-brand portfolio spanning budget to luxury hospitality. BWH Hotels' portfolio includes prominent brands such as Best Western Hotels & Resorts, WorldHotels, and Sure Hotels, serving millions of guests annually across approximately 4,300 hotels that generate more than $8.5 billion in annual revenue.

UAE breach attempts, dupe ransomware, PAN-OS vulnerability & Microsoft's Phone Link attack [321]

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community. Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform. This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows.

Teen Hackers and Cybercrime: How Online Curiosity Becomes Multi-Million Dollar Data Breaches

Groups behind these operations actively watch online platforms for talent. When they spot someone with advanced skills, they reach out, posing as peers and offering access to tools, techniques, and a share of the profits.

Are Streaming Services Putting Your Data at Risk?

There's a version of this conversation that sounds alarmist, and that's not what this is. The unfortunate thing is that most people don't think about this until something goes wrong. A suspicious charge on a card, a login alert from a device they don't recognize, an email that knows a little too much. By the point that question isn't hypothetical anymore. But it's worth thinking about before that happens, because the answer is more complicated than a simple yes or no.

You Have 60 Seconds to Stop the Breach. Are You Ready?

2026 has officially become the year of speed, scale and support The delta between a phishing email landing and a full organizational compromise has shrunk to mere seconds. The reality by the numbers: To close this window, your defense strategy must evolve into a two-step powerhouse of accuracy and automation.

The JSONFormatter Wake-Up Call: How Developer Tools Are the New Identity Breach Vector

Everyone uses developer tools to get through the day. A JSONFormatter to inspect an API response, or a JWT decoder when you need to inspect a token quickly. In most engineering teams, these tools are treated as harmless productivity aids. In November 2025, researchers discovered that JSONFormatter and CodeBeautify had been storing everything users pasted into them via a save feature that generated shareable links with fully predictable URL structures. A simple crawler could retrieve all of them.

The $10 Million Question: Why Are 81% of Organizations Still Getting Breached?

We are living in a security paradox. Cybersecurity budgets are increasing, security stacks are growing more complex, and yet, the needle barely seems to move. According to the newly drafted 2026 Cyberthreat Defense Report (CDR), 81% of organizations experienced at least one successful cyberattack this past year. Even more concerning, the number of organizations suffering from six or more successful attacks is actually creeping up.

What You Need to Know about the Amtrak Data Breach

Amtrak was created by Congress in 1970 as the National Railroad Passenger Corporation. It operates a nationwide rail network with over 300 trains serving more than 500 destinations in 46 states, three Canadian provinces, and the District of Columbia on more than 21,400 miles of route. Booking tickets online when taking a trip with Amtrak comes with so much convenience, ranging from saved passenger details to easy payment processing and quick reservations.

What You Need to Know about the Illinois and Texas Healthcare Data Breaches

Three prominent healthcare organizations in the United States have officially disclosed major data breaches that have compromised the personal and medical information of about 600,000 people. The affected organizations were Southern Illinois Dermatology and Saint Anthony Hospital in Illinois and the North Texas Behavioral Health Authority (NTBHA) in Texas.
Featured Post

Keep an eye out, breaches leave patterns

Most major security breaches in the last five years had one thing in common. Not just unpatched vulnerabilities, but a decision someone made to live with it. A VPN credential that never got rotated, an admin account that outlasted the employee who owned it, or a privilege elevation request approved because it was easier than asking questions. The details change, but the pattern doesn't. This isn't a story about sophisticated attackers. It's a story about blind spots, misplaced trust, and what happens when organizations mistake the absence of an incident for the presence of security.

Proving the Breach: Visual Strategies for Security Litigation

Cybersecurity incidents create massive messes for companies. Judges and juries need to see how a breach happened to make a fair choice. Visual aids help tell this story clearly. They turn complex digital logs into pictures anyone can understand. This clarity is the key to winning a case. It allows the truth to shine through the noise.

8 DSPM Use Cases Every CISO Should Know

Data Security Posture Management has moved from an emerging concept to an operational priority for security leaders. Understanding the most impactful DSPM use cases helps CISOs protect sensitive data across cloud environments, enforce governance policies, and stay ahead of compliance mandates. This guide breaks down eight critical applications every security leader should evaluate.