Github Gusgraujo Mercedes Benz Hackathon With Only 2 Developers And Discover how a single github token leak exposed mercedes benz’s internal code and why protecting your code is more important than ever. In may, 2020, for example, zdnet reported that source code used in smart car components designed by mercedes benz was exposed online as a result of a misconfigured git registration system.
Gitleaks Actions Github Marketplace Github Researchers discovered a github token leaked by a mercedes benz employee, potentially exposing the automaker’s internal coding infrastructure, intellectual property, and other sensitive data. It all started during one of our internet scans where we identified a github token leaked by a full time employee at mercedez, in his github repository. the github token gave ‘unrestricted’ and ‘unmonitored’ access to the entire source code hosted at the internal github enterprise server. A github token leaked by a mercedes benz employee provided access to all the source code stored on the carmaker’s github enterprise server, attack surface firm redhunt labs reports. On september 29, 2023, researchers at redhunt labs discovered a github token in a public repository belonging to a mercedez employee that gave access to the company's internal github.
Gitleaks Actions Github Marketplace Github A github token leaked by a mercedes benz employee provided access to all the source code stored on the carmaker’s github enterprise server, attack surface firm redhunt labs reports. On september 29, 2023, researchers at redhunt labs discovered a github token in a public repository belonging to a mercedez employee that gave access to the company's internal github. For four months, mercedes benz lost control of critical private data —including designs, security keys and source code. the culprit was a single developer who accidentally published a github token in some public source. According to security researchers at redhunt, a github token leaked by a mercedes benz employee provided access to all the source code stored on the carmaker’s github enterprise server. It was an ordinary internet scan by redhunt labs, an attack surface management firm, that first unearthed the shocking revelation: a github token, inadvertently leaked by a mercedes benz employee, had provided unrestricted access to the carmaker ‘s github enterprise server. Here's what we know about the automaker's latest secrets breach — and lessons your security team can draw from it.
Comments are closed.