Stolen GitHub tokens se attackers ne private repo secrets ko Actions logs me chhupa diye
Yahan publish hua 26 Oct, 6:20 pm IST · Source ki tareekh 26 Oct, 1:19 pm IST
Source label batata hai khabar kahan se aayi, independent verification nahi. Reading guide
Wiz ke analysis ke mutabik, chori hue GitHub tokens se attackers ne workflows create kiye jo repo secrets ko logs me print karte hain, phir delete kar dete hain.
Aapko kya karna haiGitHub users ko apne token rotation karne aur suspicious workflow runs ko review karne ki salah di jati hai
Updates aur sources (1)
Har update ka asli source neeche hai. Multiple links independent verification ka proof nahi hain.
- Automation ke through secret theft ka proof diya gayaGheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs ↗
Aapki raay