UK government code exposed: over 100 vulnerabilities found in public repositories
A security researcher uncovered more than 100 serious vulnerabilities across UK government codebases, including credentials with broad access. These issues are largely due to insecure defaults, excessive permissions, and poor supply chain governance, and were discovered using consumer AI tools on a laptop. The findings highlight the risks associated with openly publishing government code and the importance of robust security practices, especially in the era of AI democratization of vulnerability discovery. Organizations are urged to strengthen identity and secrets management, enforce least privilege, and adopt automated security controls in development pipelines.
Linha do tempo
-
UK government code exposed: over 100 vulnerabilities found in public repositories
ler a análise desta fonte ocultar
A security researcher uncovered more than 100 serious vulnerabilities across UK government codebases, including credentials with broad access. These issues are largely due to insecure defaults, excessive permissions, and poor supply chain governance, and were discovered using consumer AI tools on a laptop. The findings highlight the risks associated with openly publishing government code and the importance of robust security practices, especially in the era of AI democratization of vulnerability discovery. Organizations are urged to strengthen identity and secrets management, enforce least privilege, and adopt automated security controls in development pipelines.