Tay ๐
@tayvano_
dont believe their lies ๐ฆ ๐๐ก๏ธ
๊ฐ์
January 2009
7.9K ํ๋ก์ ์ค 90.2K ํฌ
As is tradition, Microsoft can ship security things (once they themselves get rekt.)
GitHub shipped bulk credential revocation for Enterprise. One action cuts off compromised credentials across the entire org during an active incident.
Recent attacks have shown what happens when revocation is slow or incomplete. The Trivy compromise came back for a second round because the first cleanup left at least one credential alive. Incomplete rotation is what keeps attacks going after the initial breach.
๋ ๋ณด๊ธฐ
