Threat Actors Stole Source Code from SonarQube Instances of US Government Agencies, Says FBI

Read the original article: Threat Actors Stole Source Code from SonarQube Instances of US Government Agencies, Says FBI


FBI issues a warning of a successful intrusion into some US government agencies and private businesses by unnamed threat actors who used SonarQube configuration vulnerabilities in their attacks. SonarQube is an open-source platform used by many private and governmental agencies to track metrics history, inspect code quality and automatically review projects written in 20+ languages, […]


Read the original article: Threat Actors Stole Source Code from SonarQube Instances of US Government Agencies, Says FBI