/
data_types_exposed:internal_documentation × limpar

Resultados

2 casos · pág. 1/1

trustedsec.com · low

hate_crack maintainer's git hook mishap pushes private notes to public repo; project splits config and hardens its release process

TrustedSec's Justin Bollinger describes how a prek pre-push hook corrupted his git index on July 30. The resulting commit deleted 85,280 lines across about 165 files and staged gitignored, local-only paths (CLAUDE.md, .claude/, docs/plans/, docs/superpowers/). The commit reached the public trustedsec/hatecrack remote before it was force-p…

unit42.paloaltonetworks.com · medium

Opportunistic Intruder Abuses Third-Party-Managed VPN Gateway Without MFA to Probe European Bank; WSUS RCE Attempt Blocked by Cortex XDR

Unit 42 investigated a months-long intrusion against a European bank, which began with unauthorized VPN-based access through a third-party-managed external gateway appliance that did not enforce strict authentication. Using compromised credentials, the attacker ran noisy, high-volume internal reconnaissance and brute-force campaigns again…