Microsoft

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...
Hosted on MSN

FL Studio 20 for beginners: Complete 16-minute tutorial

Learn FL Studio 20 from scratch in just 16 minutes! This complete beginner-friendly tutorial guides you step by step to create music and beats confidently. #FLStudio20 #MusicProduction ...
InfoQ

Run Untrusted AI Agent Code Safely with Azure Container Apps Sandboxes

Microsoft has announced the public preview of Azure Container Apps Sandboxes. This new ARM resource type is Microsoft.App/SandboxGroups runs untrusted code generated ...
The Next Web

Self-replicating Miasma worm hits 73 Microsoft GitHub repositories in supply chain attack

The Miasma worm hit 73 Microsoft GitHub repos across Azure and Microsoft orgs. It plants payloads that trigger in AI coding tools like Claude Code and Cursor. The self-replicating Miasma worm has ...
The Hacker News

Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

Microsoft's GitHub repositories have become the latest to fall victim to the ongoing Miasma self-replicating supply chain attack campaign. The incident impacted 73 Microsoft repositories across four ...
Bleeping Computer

VS Code zero-day lets hackers steal GitHub tokens in one click

A security researcher has released exploit code for a Visual Studio Code (VS Code) zero-day vulnerability that allows attackers to steal GitHub authentication tokens by tricking users into clicking a ...
CNBC

Microsoft unveils new AI models to lessen reliance on OpenAI and lower costs for developers

At its Build developer conference in San Francisco, Microsoft announced MAI-Code-1-Flash, its inaugural model in the AI coding space. Microsoft is trying to establish a presence with proprietary ...
SiliconANGLE

GitHub confirms breach of 3,800 internal repos after employee installs poisoned VS Code extension

Hackers exfiltrated roughly 3,800 of GitHub Inc.’s internal code repositories after one of its employees installed a poisoned Visual Studio Code extension, the Microsoft Corp.-owned developer platform ...
Dark Reading

GitHub Confirms Breach, 4K Internal Repos Stolen

GitHub confirmed today it was breached via an attacker that stole thousands of internal repositories. "As always this is not a ransom. We do not care about extorting GitHub, 1 buyer and we shred the ...
VentureBeat

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...
HotHardware

GitHub Breach Exposes 3,800 Internal Repos via Poisoned VS Code Plugin

Software developers are increasingly becoming bigger targets for hackers, who are now searching for ways to compromise the software supply chain in an effort to distribute malware. The latest ...
The Next Web

GitHub confirms hackers stole thousands of internal code repositories after employee installed a poisoned VS Code extension

GitHub confirmed that the cybercrime group TeamPCP exfiltrated roughly 3,800 internal code repositories after compromising an employee device through a poisoned VS Code extension. The Microsoft-owned ...