Microsoft Confirms GitHub-Hosted Malware Infected Nearly 1 Million Windows Devices, Fixes 67 Vulnerabilities Including 6 Zero-Days

Microsoft has confirmed that a large-scale malware campaign, utilizing malicious repositories on GitHub, has infected nearly one million devices worldwide. The malware primarily targets Windows users and is part of a broader malvertising effort aimed at stealing sensitive information. According to Microsoft Security Intelligence, the campaign has affected a wide range of consumer and enterprise machines. In response to this security threat, Microsoft has also released a Patch Tuesday update addressing 67 vulnerabilities, including six actively exploited zero-day vulnerabilities. This update is part of the company's ongoing efforts to enhance cybersecurity and protect its foundational systems and core products.