GitHub and wfx-loot: Steps to Detect and Contain Secret Theft

The wfx-loot campaign affected 4,837 compromised accounts and tested write permissions across 61,764 GitHub repositories; in at least 1,835 of…

read more

4,837 GitHub Accounts Planted a Secret Stealer in Repositories

4,837 GitHub accounts were used to test write access to 61,764 repositories and, in some of them, install a secret…

read more