An internal code repo used by New York State’s IT office was exposed online

guest · Jun 24, 2021

An internal code repo used by New York State’s IT office was exposed online
June 24, 2021
https://techcrunch.com/2021/06/24/a...new-york-states-it-office-was-exposed-online/

A code repository used by the New York state government’s IT department was left exposed on the internet, allowing anyone to access the projects inside, some of which contained secret keys and passwords associated with state government systems.

The exposed GitLab server was discovered on Saturday by Dubai-based SpiderSilk, a cybersecurity company credited with discovering data spills at Samsung, Clearview AI and MoviePass.
Click to expand...

When TechCrunch visited the GitLab server, the login page showed it was accepting new user accounts. It’s not known exactly how long the GitLab server was accessible in this way, but historic records from Shodan, a search engine for exposed devices and databases, shows the GitLab was first detected on the internet on March 18.
Click to expand...

Log in or Sign up

An internal code repo used by New York State’s IT office was exposed online

guest Guest

Log in or Sign up

An internal code repo used by New York State’s IT office was exposed online

guest Guest

Useful Searches