GitHub security discovered that an attacker abused OAuth tokens issued to Heroku and Travis-CI and downloaded data from many organizations which also included npm. Heroku and Travis-CI were having OAuth applications that were used by many GitHub users even by GitHub itself. GitHub stated that these OAuth tokens were not stored in GitHub in their […]
The post GitHub – Hackers Stolen OAuth User Tokens to Download Data From Multiple Organizations appeared first on Cyber Security News.
http://dlvr.it/SNqxtq
