Tag: alibaba cloud
2 articles

Exposed Cloud Credentials Abound in Public Gitee Repositories
A recent scan of public Gitee repositories uncovered a staggering 26,400 exposed cloud credentials that still worked when tested, highlighting the alarming risk of long-discarded secrets remaining live and exploitable. This shocking discovery was made by independent researcher Ben Zimmermann, who analyzed a massive 7.25 million public repositories.

Z.ai Exposes User Code, Sparks Security Concerns
Z.ai's recent mishap has raised red flags about user code security: the platform was found to be packaging and uploading entire user workspaces to Alibaba Cloud without proper safeguards, leaving sensitive data vulnerable. Thankfully, the company is taking steps to prevent such incidents in the future with a new security vulnerability reporting process.