Grafana Experiences Security Incident: Attackers Use Gato-X to Steal Signature Data

According to the Gate.io News bot, Wu Shuo reported that SlowMist's Chief Information Security Officer 23pds disclosed on social media that the Open Source data visualization tool Grafana recently encountered a security incident. Attackers used the Gato-X tool to steal confidential signatures and launched attacks on multiple code repositories using App tokens. According to 23pds's description, attackers successfully injected JavaScript code and obtained confidential information through carefully crafted branch names. This attack involved a Private Key of an application in a workflow.

View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Share
Comment
0/400
No comments
Trade Crypto Anywhere Anytime
qrCode
Scan to download Gate app
Community
English
  • 简体中文
  • English
  • Tiếng Việt
  • 繁體中文
  • Español
  • Русский
  • Français (Afrique)
  • Português (Portugal)
  • Bahasa Indonesia
  • 日本語
  • بالعربية
  • Українська
  • Português (Brasil)