Friday, 24 March, 2023

FBI: Hackers stole source code from govt and private firms

<p>The US FBI, in a security alert, has warned that cybercriminals are abusing misconfigured SonarQube apps to access and steal source code repositories from govt agencies and private firms to gain access to critical information. SonarQube apps are installed on web servers and connected to source code hosting systems like BitBucket, GitHub, or GitLab accounts, or Azure DevOps systems. The FBI suggested a change of SonarQube default settings.</p>