Attackers accessed, downloaded code from Grafana Labs’ GitHub

Source: Help Net Security  ·  Category: Ransomware & Breach


Threat actor accessed and downloaded Grafana Labs' GitHub codebase. Significant: Grafana widely used in enterprise DevOps and observability. If firm uses Grafana (open-source or Cloud), assess whether code was targeted for vulnerabilities; review access logs for suspicious activity. Client notification not required unless firm stores sensitive data in Grafana instances.

→ Read the full article

Read more