GitHub will revoke three password-protected code-signing certificates for its Desktop and Atom applications on Thursday of this week. GitHub detected unauthorized access to repositories in early December 2022. The revocation will invalidate certain versions of Desktop and Atom as of February 2. Mac users are urged to update to the latest version of Desktop (2.3.1.5 …
The biggest story, by far, even if it didn’t get any media coverage, was Slack’s secret data breach disclosure published just ahead of New Year’s Eve. The company said a threat actor stole “Slack employee tokens” and gained access to its GitHub source code repositories. This happened on December 27, according to Slack, and the …