The JFrog Security Research team has recently discovered and reported a leaked access token with administrator access to Python’s, PyPI’s and Python Software Foundation’s GitHub repositories, which was leaked in a public Docker container hosted on Docker Hub.
As a community service, the JFrog Security Research team continuously scans public repositories such as Docker Hub, NPM, and PyPI to identify malicious packages and leaked secrets. The team reports any findings to the relevant maintainers before attackers can take advantage of them. Although many secrets that are leaked in the same manner are encountered, this case was exceptional because it is difficult to overestimate the potential consequences ...
The Voice of Cyber®
BUSINESS
Newest Release
Deep Dive Articles
Sort By
- Date
- Title
In a recent episode of the KBKast, host Karissa Breen dove into details about current cyber landscape and critical cybersecurity challenges pertinent to small and medium ...
Critical infrastructure – including healthcare, financial infrastructure, telecommunications, energy infrastructure, water assets and more – are vital to Australia's national ...
This article looks at the process of cyber risk quantification.
As organisations increasingly look towards cyber insurance to strengthen their cyber security strategies, it’s imperative their houses are in order. The first line of defence ...
In a recent interview, Sergey Gribov, a Partner at Flint Capital, shared his opinion on investing in early-stage cybersecurity startups. More capital is being spent on ...
In a recent interview, Marcus Thompson provided insights into the Australian cybersecurity industry, market consolidation, and the future of cybersecurity companies in the ...
In The News
Sort By
- Date
- Title
SecurityBridge Continues U.S. Team Expansion
F5 today announced expanded technology partnerships and customer win milestones that reinforce its position as a leader in multicloud networking. According to IDC, the ...
Developers now have more LLMs to choose from when iterating and building production-ready RAG applications
Initiatives and new collaborations allow organisations to deploy AI securely and at scale, supported by an NCS AI talent base of 3,000 AI practitioners and 300 AI experts
Aon utilises SentinelOne Singularity™ platform to help profile risk for underwriting and provide more visibility into insurability drivers to better manage and mitigate risk
Provider of AI-powered infrastructure software Progress (Nasdaq: PRGS) today released new and powerful enhancements to help organisations protect their web applications ...