> If they can do it to Microsoft, they can do it to anyone else who has a GitHub account. I don't think this is necessarily true. Microsoft's org, like any lar

> If they can do it to Microsoft, they can do it to anyone else who has a GitHub account. I don't think this is necessarily true. Microsoft's org, like any large org, has a large number of users with access. Its security is dependent on each one of those many accounts being secure. A smaller org, or an individual, can secure their repositories much more easily as there's fewer entrypoints. They haven't mentioned whether this hack was achieved by compromising individual account credentials, or by compromising the Github platform itself. If it's the latter, you may be right, but I suspect it's more likely the former.