TGViewer
Netsec Netsec @rnetsec · 7.9K subscribers
Post #23634 209
Leaked GitHub App private keys let researchers impersonate 440 apps including CDC and BuildBuddy
https://ift.tt/jMGDAOp

Submitted September 23, 2026 at 10:50AM by mabote
via reddit https://ift.tt/ypd8Dr5
GitGuardian Blog - Take Control of Your Secrets Security GitHub App Private Keys: 474 Leaked Keys Still Work GitGuardian tested thousands of leaked GitHub App private keys and found 474 valid ones, some with admin access to entire organizations. CDC and BuildBuddy were among those affected. See the findings.
Open in Telegram All posts from @rnetsec
More from @rnetsec
  1. Sep 23, 2026Free, hands-on 14-week university security course (open to anyone online) https://ift.tt/H…
  2. Sep 23, 2026ATT&CKing TACACS+ to Pwn Your Network via a Pre-Auth RCE - elttam https://ift.tt/Ov7RV9K S…
  3. Sep 23, 2026Frame: Grounding LLM Vulnerability Detection with a Sound Separation-Logic Core https://la…
  4. Sep 22, 2026The finding said RCE. The second tester asked one question and the ticket died. Last year…
  5. Sep 22, 2026CVE-2026-45756: attacker-controlled regex in Symfony JsonPath filters (ReDoS) https://ift.…
  6. Sep 22, 2026vCenter pre-auth RCE: CVE-2026-59309/59310 https://ift.tt/zJ9a7yN Submitted September 22,…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →