Live
- PKL Season 11: U Mumbai meet UP Yoddhas in opening clash of exciting second leg in Noida
- Cong divides people on caste & religion lines for political gains: Shahnawaz Hussain
- Pushpa-2: The Rule to Launch Grand Promotional Tour Across Seven Indian Cities
- Maha polls: Congress accuses BJP of pursuing ‘divide and cut’ policy to divert attention
- His currency supply has ended: Ashwini Choubey's jibe at Tejashwi
- Avoid challenging constitutional institutions: VP Dhankhar
- Maha polls: BJP hurls questions at INDIA bloc amid Ulema Board's conditional support to MVA
- Regional rural banks must empower MSMEs via flagship govt schemes: FM Sitharaman
- Jemimah Rodrigues credits backing from Brisbane Heat teammates for classy 61-run knock
- Stalin in Virudhunagar district as part of statewide tour to monitor govt schemes
Hackers stole source code from govt agencies, private firms: FBI
Hackers stole source code from govt agencies, private firms: FBI
The US Federal Bureau of Investigation (FBI) has issued a security alert saying threat actors have stolen source code from government agencies and private firms and are abusing it to gain access to critical information.
San Francisco: The US Federal Bureau of Investigation (FBI) has issued a security alert saying threat actors have stolen source code from government agencies and private firms and are abusing it to gain access to critical information.
The FBI alert warned the owners of SonarQube, a web-based application that companies integrate into their software build chains to test source code and discover security flaws before rolling out code and applications into production environments.
The actors exploit known configuration vulnerabilities, allowing them to gain access to proprietary code, exfiltrate it and post the data publicly.
The FBI has identified multiple potential computer intrusions that correlate to leaks associated with SonarQube configuration vulnerabilities.
"SonarQube apps are installed on web servers and connected to source code hosting systems like BitBucket, GitHub, or GitLab accounts, or Azure DevOps systems," reports ZDNet.
According to the FBI, some companies have left these systems unprotected, running on their default configuration with default admin credentials.
"In August 2020, unknown threat actors leaked internal data from two organizations through a public lifecycle repository tool. The stolen data was sourced from SonarQube instances that used default port settings and admin credentials running on the affected organizations' networks," the FBI said in the alert.
This activity is similar toa previous data leak in July 2020, in which an identified cyber actor exfiltrated proprietary source code from enterprises through poorly secured SonarQube instances and published the exfiltrated source code on a self-hosted public repository.
The FBI suggested the firms change the SonarQube default settings, including changing default administrator username, password and port (9000).
"Place SonarQube instances behind a login screen, and check if unauthorized users have accessed the instance and revoke access to any application programming interface keys or other credentials that were exposed in a SonarQube instance, if feasible," the agency suggested.
