Samsung security secrets were found exposed to the public by a security researcher. Just how big a security faux pas was this? Here's what is known so far…
Share to linkedinA security researcher has revealed that a whole load of sensitive information has been inadvertently made accessible to the public on GitLab. Nothing so unusual about that you might think. However, the information concerned included source code, credentials and secret keys for various projects.
Samsung has revoked the Amazon Web Services credentials following Hussein's disclosure to them on April 10, although Whittaker says that vulnerability report has still not been closed by Samsung which suggests there is possibly still remediation work to be done. In a statement to TechCrunch, a Samsung spokesperson said that"we have yet to find evidence that any external access occurred" but Samsung is"currently investigating this further.
Ilia Kolochenko, founder of web security vendor ImmuniWeb, says that many large enterprises unwittingly leak source code through not only public code repositories but also social networks, Pastebin and other communities on the web."Often, the source code contains hardcoded credentials and API keys," Kolochenko says,"let alone intellectual property owned by the organizations." He blames the outsourcing of software development to third parties for exacerbating the problem.
On this occasion, as far as we know, Samsung got lucky and plugged the leaks before malicious actors found out. Some might argue more by luck than judgement…
Österreich Neuesten Nachrichten, Österreich Schlagzeilen
Similar News:Sie können auch ähnliche Nachrichten wie diese lesen, die wir aus anderen Nachrichtenquellen gesammelt haben.
Should we be concerned about Netflix monetizing our user data?Netflix continues to invest billions of dollars building its library of content, with analysts predicting the company will spend $15 billion on content in 2019. But their business model warrants a closer look, says Jason Mittell. Mittell, a film professor at Middlebury College, joined THINK to discuss why we shouldn’t trust Netflix with our data just yet.
Weiterlesen »
UK police say will not investigate Huawei leak that felled defense ministerBritish police said they will not probe a leak of information about Chinese tele...
Weiterlesen »
Marriott hasn't paid the price for its massive data breachMarriott's massive data hack was certainly bad news for its reputation, as well as its customers. But it barely made a dent in its bottom line.
Weiterlesen »
Samsung doesn't know when its $2,000 folding phone will be fixed and will automatically cancel ordersSamsung doesn’t know when its $2,000 folding phone will be fixed and will automatically cancel orders
Weiterlesen »
Samsung doesn't know when its $2,000 folding phone will be fixed, and will automatically cancel ordersSamsung says if customers have until May 31 to decide if they want to keep their order.
Weiterlesen »
Everything you need to know about the 2019 Kentucky DerbyGet up to speed on TV and betting information, weather at the track, race history and more before the 145th edition of the Run for the Roses.
Weiterlesen »
32 Things That'll Do Jobs You Didn't Know Needed To Be DoneRubber wine glasses, dress weights, shoe stretchers, and 29 other products that'll solve everyday (and not so everyday) problems.
Weiterlesen »
CVS is closing 46 stores: What you need to knowCVS revealed during its quarterly earnings call it is closing 46 stores that had been underperforming. Here's what you should know.
Weiterlesen »