SecurityWeek

VS Code Configs Expose GitHub Codespaces to Attacks

Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.
ZDNet

GitHub expands teacher access to Codespaces in Global Campus

Teachers who join GitHub's Global Campus and use GitHub Classroom will now get free access to the browser-based Codespaces integrated development environment, the code hosting platform said in a ...
Infosecurity Magazine

Malicious Commands in GitHub Codespaces Enable RCE

A set of attack vectors in GitHub Codespaces have been uncovered that enable remote code execution (RCE) by opening a ...
Bleeping Computer

Hackers can use GitHub Codespaces to host and deliver malware

Researchers have demonstrated how threat actors can abuse the GitHub Codespaces' port forwarding' feature to host and distribute malware and malicious scripts. GitHub Codespaces allows developers to ...
The Next Web

GitHub Codespaces lets you code in your browser without any setup

In a major announcement for developers, GitHub has launched Codespaces — a feature that lets you code directly on the web. Think of this as a virtual Integrated Development Environment (IDE) on the ...