3 verified briefings on Data Leak. Each story includes a plain-English summary, why it matters, and the concrete action engineering teams should take.
Researchers have discovered two vulnerabilities in OpenVPN. One flaw could allow an attacker to crash the service, causing a denial of service. The second could leak sensitive data from previous sessions under specific conditions, potentially exposing private information. Both issues affect the handling of network packets.
A contractor's public GitHub repository accidentally exposed sensitive credentials. The leak included access keys for US government AWS accounts and internal systems for the Cybersecurity and Infrastructure Security Agency (CISA). A researcher from GitGuardian discovered the exposure, which was then reported by security journalist Brian Krebs.
A CISA contractor exposed highly privileged AWS GovCloud credentials and internal system details in a public GitHub repository. Security experts call it a major government data leak, revealing sensitive information about how the agency builds, tests, and deploys its internal software systems, posing a significant security risk.