Samsung is still investigating a potentially "disastrous", unsecured GitLab instance that led to a leak of sensitive source code and exposed private GitLab tokens with access to public and private projects. White-hat hacker Hussein, who notified Samsung about the vulnerability, said an entire AWS account was among the exposed files, which were set to public and not properly password protected. Samsung has revoked some AWS credentials but gave no details about the secret keys and certificates.
Samsung is still investigating a potentially "disastrous", unsecured GitLab instance that led to a leak of sensitive source code and exposed private GitLab tokens with access to public and private projects. White-hat hacker Mossab Hussein, who notified Samsung about the vulnerability, said an entire AWS account was among the exposed files, which were set to public and not properly password protected. Samsung has revoked some AWS credentials but gave no details about the secret keys and certificates.