#clone2leak
LightNews LightNews
bleepingcomputer.com
A set of three distinct but related attacks, dubbed 'Clone2Leak,' can leak credentials by exploiting how Git and its credential helpers handle authentication requests.
Clone2Leak attacks exploit Git flaws to steal credentials
A set of three distinct but related attacks, dubbed 'Clone2Leak,' can leak credentials by exploiting how Git and its credential helpers handle authentication requests.
www.bleepingcomputer.com
January 27, 2025 at 4:36 PM
potato.software
Clone2Leak Attacks: Exploiting Git Flaws to Steal Credentials

thedefendopsdiaries.com/clone2leak-a...

#clone2leak
#gitsecurity
#credentialleak
#potatosecurity
#infosec
#github
#vulnerability
#softwaresecurity
#authentication
#devsecops
January 29, 2025 at 4:40 AM
ryotak.net
I published a blog post about six vulnerabilities in Git/GitHub-related projects. They all result in credential leakage when cloning a malicious repository, so be sure to update the Git installation!

flatt.tech/research/pos...
Clone2Leak: Your Git Credentials Belong To Us
Introduction Hello, I’m RyotaK ( @ryotkak ), a security engineer at GMO Flatt Security Inc. In October 2024, I was hunting bugs for the GitHub Bug Bounty program. After investigating GitHub Enterprise...
flatt.tech
January 27, 2025 at 10:54 AM
campuscodi.risky.biz
-Node.js CVE drama
-Clone2Leak vulnerability
-Llama code exec bug
-New EDR bypass
-Atlassian security updates
-Pwn2Own Automotive 2025 results
-New tools: LOLTunnels, Slack Jack, YaraMonitor, WinVisor, EByte FOSS ransomware
-IAB campaign targets SimpleHelp RMM software
-JSAC 2024 videos
January 27, 2025 at 10:37 AM
gitforwindows.org
Just in case you missed the update to Git for Windows v2.47.1(2), here is a very solid reminder: flatt.tech/research/pos...
Clone2Leak: Your Git Credentials Belong To Us
Introduction Hello, I’m RyotaK ( @ryotkak ), a security engineer at GMO Flatt Security Inc. In October 2024, I was hunting bugs for the GitHub Bug Bounty program. After investigating GitHub Enterprise...
flatt.tech
January 28, 2025 at 1:46 PM
nord-nord-sec.de
newsletter.nord-nord-sec.de/p/nord-nord-...

Neues aus dem Cyberraum
Nord-Nord-Sec #45
clone2leak, Cookie Sandwich, Die SOC Toolbox, GenAI Patterns, Infrastructure Laundering,
newsletter.nord-nord-sec.de
February 6, 2025 at 7:52 PM
bolhasec.com
Notícia da BleepingComputer

"Ataques Clone2Leak exploram falhas do Git para roubar credenciais" #bolhasec
Clone2Leak attacks exploit Git flaws to steal credentials
A set of three distinct but related attacks, dubbed 'Clone2Leak,' can leak credentials by exploiting how Git and its credential helpers handle authentication requests.
www.bleepingcomputer.com
February 18, 2025 at 3:30 PM
bleepingcomputer.com.web.brid.gy
Clone2Leak attacks exploit Git flaws to steal credentials
A set of three distinct but related attacks, dubbed 'Clone2Leak,' can leak credentials by exploiting how Git and its credential helpers handle authentication requests. [...]
www.bleepingcomputer.com
January 28, 2025 at 11:23 AM
it-connect.bsky.social
💥 𝗖𝗹𝗼𝗻𝗲𝟮𝗟𝗲𝗮𝗸 : comment des failles Git font fuiter vos identifiants ?

🩹 Des mises à jour de sécurité sont disponibles pour plusieurs outils, dont GitHub Desktop.

👉 Plus d'infos par ici : www.it-connect.fr/clone2leak-c...

#cybersecurite #Git #GitHub #leak
Clone2Leak : des failles Git mettent vos identifiants en danger
Des vulnérabilités liées à l'attaque Clone2Leak, identifiées dans GitHub Desktop et d'autres outils Git, exposent les identifiants des utilisateurs.
www.it-connect.fr
January 29, 2025 at 12:10 PM
xc0py.bsky.social
Clone2Leak: Your Git Credentials Belong To Us flatt.tech/research/pos...
Clone2Leak: Your Git Credentials Belong To Us
Introduction Hello, I’m RyotaK ( @ryotkak ), a security engineer at GMO Flatt Security Inc. In October 2024, I was hunting bugs for the GitHub Bug Bounty program. After investigating GitHub Enterprise...
flatt.tech
January 27, 2025 at 6:22 PM
wiretor.bsky.social
🚨 Clone2Leak Attacks Exploit Git Flaws to Steal Credentials 🚨
Read Here: medium.com/@wiretor/clo...
January 27, 2025 at 6:17 PM
bluecyber.bsky.social
flatt.tech/research/pos...
Clone2Leak: Your Git Credentials Belong To Us
Introduction Hello, I’m RyotaK ( @ryotkak ), a security engineer at GMO Flatt Security Inc. In October 2024, I was hunting bugs for the GitHub Bug Bounty program. After investigating GitHub Enterprise...
flatt.tech
January 27, 2025 at 2:56 PM
infosec.skyfleet.blue
Clone2Leak attacks exploit Git flaws to steal credentials
Clone2Leak attacks exploit Git flaws to steal credentials
A set of three distinct but related attacks, dubbed 'Clone2Leak,' can leak credentials by exploiting how Git and its credential helpers handle authentication requests.
www.bleepingcomputer.com
January 27, 2025 at 4:57 PM
hacker.at.thenote.app
Clone2Leak attacks exploit Git flaws to steal credentials

A set of three distinct but related attacks, dubbed 'Clone2Leak,' can leak credentials by exploiting how Git and its credential helpers handle authentication requests. [...]

#hackernews #news
Clone2Leak attacks exploit Git flaws to steal credentials
A set of three distinct but related attacks, dubbed 'Clone2Leak,' can leak credentials by exploiting how Git and its credential helpers handle authentication requests. [...]
www.bleepingcomputer.com
January 28, 2025 at 12:37 PM
dataconomy.com.web.brid.gy
Clone2Leak exposes credential risks in Git ecosystem
Clone2Leak, a newly identified set of vulnerabilities in Git and its ecosystem, poses significant risks to developers by exploiting flaws in credential management protocols. Discovered by security researcher RyotaK from GMO Flatt Security, these vulnerabilities could allow attackers to leak stored credentials and access sensitive repositories. While patches have been released to address the issues, […]
dataconomy.com
January 29, 2025 at 12:17 AM
azu.bsky.social
見てる: "Clone2Leak: Your Git Credentials Belong To Us - GMO Flatt Security Research" https://flatt.tech/research/posts/clone2leak-your-git-credentials-belong-to-us/
January 27, 2025 at 11:40 AM
lobsters-feed.bsky.social
Clone2Leak: Your Git Credentials Belong To Us https://lobste.rs/s/y1eqnf ##security
Clone2Leak: Your Git Credentials Belong To Us
Introduction Hello, I’m RyotaK ( @ryotkak ), a security engineer at GMO Flatt Security Inc. In October 2024, I was hunting bugs for the GitHub Bug Bounty program. After investigating GitHub Enterprise Server for a while, I felt bored and decided to try to find bugs on GitHub Desktop instead. After reading the source code of GitHub Desktop, I found a bug that allows a malicious repository to leak the user’s credentials. Since the concept of the bug is interesting, I decided to investigate other Git-related projects and found many bugs.
flatt.tech
January 28, 2025 at 6:40 AM
r-netsec.bsky.social
Clone2Leak: Your Git Credentials Belong To Us
Clone2Leak: Your Git Credentials Belong To Us
flatt.tech
January 26, 2025 at 3:24 PM
buherator.bsky.social
[RSS] Clone2Leak: Your Git Credentials Belong To Us


flatt.tech ->


Original->
January 27, 2025 at 1:45 PM
defendopsdiaries.bsky.social
Clone2Leak Attacks: Exploiting Git Flaws to Steal Credentials

thedefendopsdiaries.com/clone2leak-a...

#clone2leak
#gitsecurity
#credentialleak
#cybersecurity
#infosec
#github
#vulnerability
#softwaresecurity
#authentication
#devsecops
Clone2Leak Attacks: Exploiting Git Flaws to Steal Credentials | The DefendOps Diaries
Explore Clone2Leak vulnerabilities in Git, exposing credential flaws and posing threats to software security environments.
thedefendopsdiaries.com
January 29, 2025 at 4:07 AM
eyalestrin.bsky.social
Clone2Leak: Your Git Credentials Belong To Us https://groups.googl... #appsec
January 28, 2025 at 5:30 AM
sempf.infosec.exchange.ap.brid.gy
A smart person looked at GitHub's auth and ouch.

https://flatt.tech/research/posts/clone2leak-your-git-credentials-belong-to-us/

#github #authentication
January 28, 2025 at 4:24 AM
patrickcmiller.bsky.social
Clone2Leak attacks exploit Git flaws to steal credentials https://buff.ly/4gehgvG
Clone2Leak attacks exploit Git flaws to steal credentials
A set of three distinct but related attacks, dubbed 'Clone2Leak,' can leak credentials by exploiting how Git and its credential helpers handle authentication requests.
buff.ly
January 29, 2025 at 12:12 AM
ciphermuse.bsky.social
What is https://www.bleepingcomputer.com/news/security/clone2leak-attacks-exploit-git-flaws-to-steal-credentials/ ?
January 27, 2025 at 5:41 PM
ciphermuse.bsky.social
Git flaw, Clone2Leak,
Credentials lay in the breach,
Update for reprieve.

##gitflaw ##clone2leak ##cybersecurity
January 27, 2025 at 4:41 PM