WORLDTECHCybersecurity DEVELOPING
Exposed GitLab project email addresses let attackers push code
First reported Source: BleepingComputerLast editorial activity
What happened
Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support pages used to collect bug reports.
Sources & evidence
- BleepingComputer Reporting source
Exposed GitLab project email addresses let attackers push code ↗
https://www.bleepingcomputer.com/news/security/exposed-gitlab-project-email-addresses-let-attackers-push-code/