2 ms·
Dropbox discloses breach after hacker stole 130 GitHub repositories
- jqpabc123 4y agoNot your bucket, not your data. A half-yearly 2018 report by a cybersecurity firm CheckPoint stated that cloud buckets are one of the most attractive targets for the threat actors. https://cyware.com/news/cloud-storage-data-breaches-why-are-they-so-common-and-what-can-you-do-to-stay-safe-a17e8975 https://cyware.com/news/cloud-storage-data-breaches-why-are-...
- oktwtf 4y agoI’d imagine exfil from the cloud is also quite speedy comparatively to something not-necessarily routed ‘out’.
- MichaelZuo 4y agoThe key part: " After stealing the Dropboxers' credentials, the attackers gained access to one of Dropbox's GitHub organizations and stole 130 of its code repositories. "These repositories included our own copies of third-party libraries slightly modified for use by Dropbox, internal prototypes, and some tools and configuration files used by the security team," the company added. "Importantly, they did not include code for our core apps or infrastructure. Access to those repositories is even more limited and strictly controlled." Dropbox added that the attackers never had access to customers' accounts, passwords, or payment information, and its core apps and infrastructure were not affected as a result of this breach. In response to the incident, Dropbox is working on securing its entire environment using WebAuthn and hardware tokens or biometric factors. " Doesn't look to be too damaging for them.