We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.
1/ We are sharing additional details regarding our investigation into unauthorized access to GitHub's internal repositories.
Yesterday we detected and contained a compromise of an employee device involving a poisoned VS Code extension. We removed the malicious extension version, isolated the endpoint, and began incident response immediately.
If you ever accidentally create a file named "~" in a local directory, PLEASE, do yourself a favor and delete it through a gui file manager. DO NOT try to be a hero. Don't ask me how I arrived to this conclusion
🚨 BREAKING: The FBI has successfully extracted deleted Signal messages from a suspect's iPhone via notification storage, the place where all your notifications are stored for up to one month.
Notification storage stores data from all messaging apps, it's a big flaw in iOS. But there's a way to turn it off...
🚨Cyber Alert ‼️
🇯🇵Japan - The Asahi Shimbun
Bestjpdata1 threat actor claims to have breached The Asahi Shimbun.
Allegedly, the attackers exfiltrated 1.8 million rows of data, including registered user emails, metadata, and internal article records.
Sector: News / Multimedia
Threat class: Cybercrime
Observed: Jan 14, 2026
Status: Pending verification
—
About this post:
Hackmanac provides early warning and cyber situational awareness through its social channels. This alert is based on publicly available information that our analysts retrieved from clear and dark web sources. No confidential or proprietary data was downloaded, copied, or redistributed, and sensitive details were redacted from the attached screenshot(s).
For more details about this incident, our ESIX impact score, and additional context, visit https://t.co/eB7qgxLdpI.