Hacker News new | ask | show | jobs
by nicolaslem 2605 days ago
The title on HN is clickbait, the article mentions Gitlab users storing their own Gitlab password/tokens insecurely. It doesn't look like "Gitlab was compromised" to me.

The original title is "Critical security announcement: Suspicious git activity detected".

1 comments

Correct, users across GitLab and GitHub as been affected and in all cases valid credentials were used. Also see https://www.bleepingcomputer.com/news/security/attackers-wip...

We are updating our title to better reflect what happened.

Sorry but the title still doesn't reflect the actual issue which per your link is : "Attackers Wiping GitHub and GitLab Repos, Leave Ransom Notes"