Poor Corp's security team received an email that was sent to all of their publicly listed email addresses. The email contained a vague message stating that the sender had found a security vulnerability and needed Poor Corp to reach out to them immediately. Poor Corp’s security team was confused, but they had locked down their policy to not allow public repositories.

5m read timeFrom blog.gitguardian.com
Post cover image
Table of contents
About this seriesFinding leaked codeHow the code was leakedLessons learned
1 Comment

Sort: