hardcoded credentials

Cybersecurity & Risk

Extortion Group FulcrumSec Turned a Hardcoded GitHub Token Into a 1.3TB Novo Nordisk Breach

Extortion group FulcrumSec exploited a hardcoded GitHub token in public-facing JavaScript to steal 1.3TB from Novo Nordisk and demand $25 million.