Sicherheitspatch Grafana: Angreifer können sensible Daten abgreifenAlertheise security Quelle: Heise Security Ticker
Über ein manipuliertes TanStack-npm-Paket der Mini-Shai-Hulud-Kampagne gelangen Angreifer in die CI/CD-Pipeline von Grafana Labs und stehlen den kompletten Quellcode aus GitHub-Repositories. Das Unternehmen lehnt die Lösegeldforderung ab und informiert US-Bundesbehörden. Produktionssysteme und die Grafana-Cloud-Plattform bleiben nach Firmenangaben unberührt.
Hackers accessed Grafana’s GitHub repositories after a token compromised in the TanStack attack was not rotated. The post Grafana Says Codebase and Other Data Stolen via TanStack Supply Chain Attack appeared first on SecurityWeek.
The Grafana data breach was caused by a single GitHub workflow token that slipped through the rotation process following the TanStack npm supply-chain attack last week. […]
Cyberangriff Grafana: Erpresser kopieren Sourcecode und drohen mit Leak3heise Security Quelle: Heise Security Ticker
Grafana Labs disclosed that hackers have downloaded its source code after breaching its GitHub environment using a stolen access token. […]
Grafana appears to have been targeted by Coinbase Cartel, a cybercrime group linked to ShinyHunters, Scattered Spider, and Lapsus$. The post Grafana Confirms Breach After Hackers Claim They Stole Data appeared first on SecurityWeek.
Grafana Labs hat Version 13 vorgestellt – mit automatischen Dashboard-Vorschlägen, beschleunigter Log-Analyse in Loki und vereinfachtem OpenTelemetry-Setup.
By hiding malicious instructions on an attacker-controlled Web page, AI could ingest orders that appear benign but return sensitive data to the attacker’s server.