Canadian financial giant, Scotiabank, has torn down GitHub repositories, which were inadvertently left open to the public and contained sensitive internal source code information, as well as some private login keys to backend systems.
.@Scotiabank embracing open source – puts code on Github https://t.co/RUuLFWyjsj via @Finextra #fintech
— Adam Nanjee (@adamnyyz) August 16, 2018
Experts Comments
September 19, 2019
Public code repositories, various code and data sharing projects can greatly facilitate DevSecOps and accelerate agile software development. However, they likewise bring a wide spectrum of critical business risks of inadvertent or careless data leaks exacerbated by third-party developers with insufficient security training. Some developers recklessly share passwords from production systems on Pastebin thereby opening doors to their digital realms without thinking about the consequences......Read More
Like(Submit Your Expert Comments
What do you think of the topic? Do you agree with expert(s) or share your expert opinion below.Be part of our growing Information Security Expert Community (1000+), please register here.
Linkedin Message
@Anurag Kahol, CTO , provides expert commentary at @Information Security Buzz.
"Misconfigurations like this have grown in popularity as an attack vector across all industries. ..."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/scotiabanks-muppet-grade-security-and-tortoiseshell-infecting-it-providers-to-hit-their-customers
Facebook Message
@Anurag Kahol, CTO , provides expert commentary at @Information Security Buzz.
"Misconfigurations like this have grown in popularity as an attack vector across all industries. ..."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/scotiabanks-muppet-grade-security-and-tortoiseshell-infecting-it-providers-to-hit-their-customers