Stolen GitHub access exposes code pipelines and cloud secrets

Daily Cyber News: Stolen GitHub access exposes code pipelines and cloud secrets

Development pipelines and cloud environments were put at risk after an attacker used stolen GitHub access to probe more than sixty thousand repositories. Roughly four thousand eight hundred compromised accounts submitted pull requests to test whether they could make changes. Researchers confirmed that secrets were stolen from at least one thousand eight hundred thirty five targets.

Key context: This wasn’t an exploit against GitHub Actions.

Additional detail: The malware searched for repository secrets, cloud credentials, GitHub tokens and AI service keys.

For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.

Topics: cybersecurity news, cybersecurity, cyber risk, malware, Stolen GitHub, Stolen, GitHub, access, exposes, code.