EMERALDWHALE exploits vulnerable Git configuration files

A whale made of emerald illustrating the discovery of the EMERALDWHALE campaign by cyber security researchers that exploits Git configuration files and has leaked over 15,000 credentials.

Sysdig’s Threat Research Team (TRT) has uncovered a global operation known as EMERALDWHALE, which has stolen over 15,000 cloud service credentials by exploiting exposed Git configuration files.

EMERALDWHALE utilised multiple private tools to exploit several misconfigured web services, resulting in the theft of credentials from more than 10,000 private repositories.

Though the operation's primary targets appeared to be cloud service and email providers, the ultimate aim...

1 November 2024 | Developer

GitHub begins offering data residency to EU developers

GitHub Octocat reading a newspaper after news that the company will offer data residency, starting with EU developers.

GitHub has announced that it will introduce data residency capabilities, beginning with EU developers on 29 October 2024. The new data residency feature for Enterprise Cloud will allow organisations to store their GitHub code and repository data in their preferred geographical region.

"We've heard for years from enterprises that being able to control where their data resides is critical for them," explained Jim Wang, VP of Engineering at GitHub. “With data residency,...

25 September 2024 | Cloud

New OutSystems data fabric unifies data across the enterprise  

OutSystems, a specialist in high-performance application development, has unveiled what it describes as one of the most significant updates to OutSystems Developer Cloud since its initial release.

With the launch of OutSystems Data Fabric, organisations can lay the groundwork to build dynamic applications, harness data across the enterprise, and increase developer productivity. 

In an era where outdated data can cost businesses more than $15 million annually (per...

25 March 2024 | Analytics

Infrastructure automation: The full data journey from ingestion to insights

Remember when cloud was acclaimed as the simple solution to disentangling legacy IT infrastructure? Nostalgia isn’t what it used to be.

Amazon Web Services (AWS), at last count, now has more than 225 products from which to choose, from the classic compute, database and storage; to containers and application integration; to IoT, machine learning and blockchain. Want any help? You can thumb through the Well-Architected Framework, but it might take a while. In spite of various...

25 October 2022 | Approaches

InAppBrowser tool reveals hidden JavaScript injections

A tool created by developer Felix Krause reveals hidden JavaScript injections through in-app browsers.

In-app browsers offer a convenient way for developers to let users browse specific websites without leaving their apps. However, they can be used to invade users’ privacy.

A JavaScript injection can be used via an in-app browser to collect data about users including their taps on a webpage, keyboard inputs, and more.

Armed with this data, a “digital...

19 August 2022 | Hacking & Security

Google’s new Play Store section forces developers to explain their data collection

Google is rolling out a new section in Play Store listings that forces developers to explain what data they’re collecting and how it’s being used.

The new section is titled ‘Data safety’ and will appear alongside the usual sections like ‘About this app’ and ‘Ratings and reviews’:

Apple released a similar feature as part of numerous privacy-enhancing features in last year’s iOS 14. Google showed off its version last year but is only beginning to roll...

27 April 2022 | Android

The Open Group launches data platform for energy industry developers

Vendor-neutral technology consortium The Open Group has launched an open-source data platform for developers in the energy industry.

The OSDU Data Platform is standards-based, technology-agnostic, and aims to reduce the time-to-market of new solutions.

Steve Nunn, President and CEO of The Open Group, said:

“The OSDU Data Platform Mercury Release represents an important achievement by the OSDU Forum in a very short space of time. Established in 2018, the OSDU...

24 March 2021 | Platforms

Q&A: Nicolas Hourcard, QuestDB: The advantages of a time-series database

Developers need higher performance databases to unlock the full potential of exciting but ever more data-hungry applications.

IDC forecasts that the global datasphere will grow from 45 zettabytes in 2019 to 175 zettabytes by 2025. Furthermore, the analysts expect that around 30 percent of the world’s data will need real-time processing.

"Today, more than five billion consumers interact with data every day — by 2025, that number will be six billion, or 75 percent of...

3 December 2020 | Databases