Data Breaches
Hackers accessed Grafana’s GitHub repositories after a token compromised in the TanStack attack was not rotated.
Hi, what are you looking for?
SecurityWeek
All posts tagged "source code"
Malware & Threats
At least one threat actor has adopted the recently released malware source code in attacks against NPM developers.
Cybercrime
Grafana appears to have been targeted by Coinbase Cartel, a cybercrime group linked to ShinyHunters, Scattered Spider, and Lapsus$.
Malware & Threats
The hacking group is encouraging miscreants to use the code in supply chain attacks, promising monetary rewards.
Data Breaches
The incident occurred on April 20 and did not affect customer data in the company’s production and staging environments.
Data Breaches
RansomHouse has published several screenshots to demonstrate access to internal Trellix services.
Data Breaches
The cybersecurity firm’s investigation has not found any impact on its source code release or distribution process.
Data Breaches
More information has come to light on the cyberattack disclosed this week by F5, including on attribution and potential risks.
Data Breaches
F5 shared few details on the threat actor, but the attack profile seems to point to China.
Data Breaches
Hackers claim to have stolen 28,000 private repositories, including data associated with major companies that use Red Hat services.
Application Security
GitHub security campaigns make it easier for developers and security teams to collaborate on fixing vulnerabilities in their applications.
Data Protection
GitHub has announced new capabilities to help organizations and developers keep secrets in their code protected.
Malware & Threats
The Banshee Stealer macOS malware operation, which emerged earlier this year, was reportedly shut down following a source code leak.
Data Breaches
After the hacker IntelBroker leaked stolen source code, Nokia said the impact of the cybersecurity incident is limited.
Application Security
Most critical open source software contains code written in a memory unsafe language, US, Australian, and Canadian government agencies warn.
Application Security
Aqua Security shows that code in repositories remains accessible even after being deleted or overwritten, continuing to leak secrets.
Data Breaches
The New York Times has issued a statement after someone leaked source code allegedly belonging to the news giant.
Data Breaches
A leaked token provided unrestricted access to the entire source code on Mercedes-Benz’s GitHub Enterprise server.
Application Security
Truffle Security has discovered thousands of popular websites leaking their secrets, including .git directories and AWS and GitHub keys.
Malware & Threats
Cisco has observed multiple threat actors adopting the SapphireStealer information stealer after its source code was released on GitHub.
ICS/OT
The hackers published 5GB of data, including customer personal information and credentials for the RTKBase platform.
Incident Response
Vulnerabilities
Artificial Intelligence
Anthropic takes Fable 5 and Mythos 5 offline to comply with a directive from the Trump administration to prevent use by foreign nationals.
Management & Strategy
Artificial Intelligence
Vulnerabilities
Vulnerabilities
