Latest breach of Okta's GitHub repositories raises concerns about broader supply chain attack
Okta maintains its service is operational and secure and that customers need not take any action.
Stay updated with breaking news from Github Office. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Okta maintains its service is operational and secure and that customers need not take any action.
Along with the announcement of the free secret scanning service, GitHub said that its Advanced Security customers can now protect their custom patterns.
Checkmarx researchers say the vulnerability was fixed, but warns that the potential attack surface for such “hidden malicious code” may grow exponentially.
The company’s pen testing group jammed the new research and reconnaissance tools into SCMKit, an attack simulation toolkit unveiled at Black Hat.
GitHub says the industry must do better as only 16.5% of active GitHub developers use one or more forms of 2FA.