Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizen Coje_He for the clue delivery! CTOnews.com, February 1 (Xinhua)-- GitHub, an online code hosting platform owned by Microsoft, said today that it was attacked by a cyber attack in which the intruder accessed some of the code repositories and stole the code signing certificates for Desktop and Atom applications.

The code signing certificate is used to implant an encryption stamp in the code to identify the developer of the code. After stealing the code signing certificates of Desktop and Atom apps, intruders can be used to sign unofficial versions of malicious tampering. GitHub indicates that the current versions of Desktop and Atom are not affected by credential theft.

"the intruder stole a set of encrypted code signing certificates, which are password protected, and there is no evidence that the intruder used the certificate," GitHub said in the announcement. "but as a precaution, we will revoke public certificates for GitHub Desktop and Atom applications."

GitHub Desktop for Windows was not affected. CTOnews.com comes with the affected GitHub Desktop for Mac version:

3.1.2

3.1.1

3.1.0

3.0.8

3.0.7

3.0.6

3.0.5

3.0.4

3.0.3

3.0.2

Atom version

1.63.1

1.63.0

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.