Fortune 500 at Risk: 250M Artifacts Exposed via Misconfigured Registries
Misconfigured public registries with software artifacts containing sensitive proprietary code and secrets.
- from
- CI/CD Attacks
- added
- 2026-10-10
- likes
- 0
similar
-
Erosion of Trust: Unmasking Supply Chain Vulnerabilities in the Terraform Registry boostsecurity.io
Terraform modules are not protected by the Dependency Lock File, consequently, a seemingly harmless module could potentially introduce malicious code.
-
Millions of Secrets Exposed via Web Application Frontends web.archive.org
Millions of secrets exposed in web app frontends via JavaScript and debug pages.
-
Risk Explorer for Software Supply Chains riskexplorer.endorlabs.com
-
Employee Personal GitHub Repos Expose Internal Azure and Red Hat Secrets aquasec.com
Employee's personal GitHub repos expose internal Azure & Red Hat secrets.
-
-
How a Single Vulnerability Can Bring Down the JavaScript Ecosystem landh.tech
Cache poisoning attack on the NPM registry rendering packages unavailable.
CI/CD Attacks › Techniques > Publicly Exposed Sensitive Data: “Misconfigured public registries with software artifacts containing sensitive proprietary code and secrets.”