At 6:14 a.m. GMT on August 3, 2022, a Twitter thread from Stephen Lacy threw the security Twitter-sphere into a frenzy. An alleged zero-day (-like) vulnerability that exposed over 35,000 repositories was announced; the attack leaked credentials from these compromised repositories to a malicious Russian server. And the crowd went wild—more than 20,000 likes and more..
The post GitHub Zero-Day: From 35K Repos Compromised to False Alarm appeared first on Security Boulevard.
Article Link: GitHub Zero-Day: From 35K Repos Compromised to False Alarm - Security Boulevard