blog.ammaraskar.com

1-Click GitHub Token Stealing via a VSCode Bug (opens in new tab)

Covers April 2024 (version 1.89)Covered by 24 sources See all sources covering this story including BleepingComputer, theregisterDiscussed on Hacker News, Lobsters, r/linux, r/netsec, and r/programming

My blog, mostly about programming

Read the original article
Sign in to keep reading the full article.
Sign UpLog In

Covered in 28 articles

BleepingComputer·

VS Code zero-day lets hackers steal GitHub tokens in one click

Feeds
theregister·

Another bug hunter leaks Microsoft exploits in defiance of company’s handling of vulnerability disclosures

Discussed on Hacker News
Feeds
SecurityWeek·

VS Code Vulnerability Allows One-Click GitHub Token Theft

Feeds
View all 28 ›

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help