GitHub confirms breach of 3,800 repos via malicious VSCode extension

Published on May 20, 2026

GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension. [...]

Continue reading on website
Other news

Microsoft shares mitigation for YellowKey Windows zero-day

May 20, 2026
Microsoft has shared mitigations for YellowKey, a recently disclosed Windows BitLocker zero-day vulnerability that grants access to protected drives. [...]

Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit

May 20, 2026
Microsoft on Tuesday released a mitigation for a BitLocker bypass vulnerability named YellowKey following its public disclosure last week.The zero-day flaw, now tracked as CVE-2026-45585, carries a CVSS score of 6.8. It has been described as a BitLocker security feature bypass."Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as 'YellowKey,'" the