HomeAI · summaries
Storia in 8 fonti
Un bug di Visual Studio Code permette il furto dei token GitHub con un clic
Una vulnerabilità di VS Code consente il furto dei token GitHub tramite github.dev e notebook malevoli. Perché è importante.
Confronto fonti
6 prospettive sulla stessa storiaTimeline cronologica
- ·
infoworld.com
Hole in GitHub’s browser-based VSCode editor could lead to stolen token
Its disclosure raises questions about what security researchers should expect from vendors, and how far in advance of its publication they should notify vendors about a bug.
- ·
bleepingcomputer.com
VS Code zero-day lets hackers steal GitHub tokens in one click
A security researcher has released exploit code for a Visual Studio Code (VS Code) zero-day vulnerability that allows attackers to steal GitHub authentication tokens by tricking…
- ·
ilsoftware.it
Un bug di Visual Studio Code permette il furto dei token GitHub con un clic
Una vulnerabilità di VS Code consente il furto dei token GitHub tramite github.dev e notebook malevoli. Perché è importante.
- ·
thehackernews.com
One-Click GitHub Dev Attack Lets Attackers Steal Full GitHub OAuth Tokens
VS Code flaw exposes GitHub OAuth tokens via one-click attack on GitHub.dev, enabling private repo access and token theft.
- ·
thenextweb.com
GitHub.dev flaw lets attackers steal OAuth tokens in one click
A VS Code vulnerability in GitHub.dev lets attackers steal full GitHub OAuth tokens via a single malicious link, exposing all private repositories.
- ·
securityweek.com
VS Code Vulnerability Allows One-Click GitHub Token Theft
A researcher has disclosed details of a severe VS Code vulnerability that can be exploited to steal GitHub tokens and access repositories.
- ·
cryptobriefing.com
Microsoft fixes severe VS Code vulnerability enabling GitHub token theft
Microsoft patched a critical VS Code vulnerability on June 3, 2026, after researcher Ammar Askar revealed a one-click attack stealing GitHub OAuth tokens
- ·
heise.de
Angriff auf GitHub.dev stiehlt das OAuth-Token für alle Repos
Eine Lücke auf Github.dev – VS Code im Browser – ermöglichte es Angreifern, alle Repos eines Anwenders zu verseuchen, um verschiedene Angriffe zu starten.