Simulated Digital Cyber Attack
A GitHub Personal Access Token posted in Slack. Left exposed since July 2024. That's all it took to compromise an entire software build pipeline and gain the ability to poison every artifact the organization shipped.
A GitHub Personal Access Token posted in Slack. Left exposed since July 2024. That's all it took to compromise an entire software build pipeline and gain the ability to poison every artifact the organization shipped.
