24 ms·
AWS issued a post and they talk about revoking and replacing a credential. So maybe the hacker was able to directly push? https://aws.amazon.com/security/secu
by wunderwuzzi23 1y ago
AWS issued a post and they talk about revoking and replacing a credential.
So maybe the hacker was able to directly push?
https://aws.amazon.com/security/security-bulletins/AWS-2025-015/ https://aws.amazon.com/security/security-bulletins/AWS-2025-...
- unitof 1y agoJoseph's 404 article quotes the hacker as saying they "got admin privileges on a silver platter," so I think this is it: first part of the breach was gaining the GitHub permission to create a branch. Possibly just by asking.