Due to a high-severity vulnerability that exposed credentials, GitHub has rotated a number of its keys. The vulnerability, disclosed through its bug bounty program, would give attackers access to credentials within a production container. The National Vulnerability Database (NVD) classified the flaw as an unsafe reflection exploit that could allow hackers to conduct Remote Code Execution (RCE) on compromised systems. This article continues to discuss the potential exploitation and impact of the security vulnerability as well as GitHub's response to it.

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have released a joint Cybersecurity Advisory (CSA) about the AndroxGh0st malware. The US agencies are sharing known indicators of compromise (IOCs) as well as tactics, techniques, and procedures (TTPs) used by the threat actors to launch the AndroxGh0st malware. According to the agencies, AndroxGh0st malware targets files containing sensitive information, such as credentials for various high-profile applications.