GitHub Account Hijack: Revoke Access Before You Rotate
A GitHub account hijack used stolen tokens on 4,837 accounts to push a secret stealer into repositories. Revoke access first, then rotate secrets.
Read MoreTag: breachy
Supplier Data Breach: What Who Gives A Crap Teaches SMEs
A marketing tool held Who Gives A Crap customer data and was breached. What UK businesses should ask suppliers, and when the ICO must hear about it.
Read More
Claude Code Secrets Leak: Check Your Repos and Rotate Keys
Apiiro found 1,122 public Claude Code settings files holding secrets. Here is how a “don’t ask again” click saves a password, and what to rotate first.
Read More
Infostealer Malware: Why a Password Reset Is Not Enough
VOLTA infostealer malware steals browser passwords, cookies and tokens, then ranks them with AI. Five steps for UK SMEs to take this week.
Read More