[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHypot8V-4nZZgwlMnmQxd39kPKnpw3kV_YXJrI_3OtQ":3},{"article":4,"iocs":41,"watch_terms":46,"solutions":47,"lesson":133},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"00aeed61-856a-4453-832d-fe12d4138d25","Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach","meta-says-hackers-took-code-personal-data-of-1-500-in-github-breach-31360d","Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services. The post Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach appeared first on SecurityWeek.","Meta is notifying approximately 1,500 individuals, primarily US-based employees, about a breach of its GitHub repositories. Hackers gained access using stolen employee credentials, compromising software code and a small amount of personal data that was improperly stored on the platform. Meta has since secured its repositories, rotated secrets, and is implementing new controls to prevent similar incidents.","Meta reports hackers accessed GitHub repositories using stolen employee credentials, exposing code and some personal","https:\u002F\u002Fwww.securityweek.com\u002Fmeta-says-hackers-took-code-personal-data-of-1500-in-github-breach\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2023\u002F03\u002FMeta-Facebook-e1739539212391.jpg","2026-10-13T16:01:00+00:00","2026-10-13T18:00:15.811981+00:00",7,[17,20],{"name":18,"type":19},"Meta","vendor",{"name":21,"type":22},"GitHub","product","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,34,36],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":35},{"id":23,"icon":25,"name":26,"slug":27},{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[42],{"type":43,"value":44,"context":45},"malware","XWorm RAT","Mentioned in related articles section, not directly related to the Meta breach.",[18,21],{"controls":48,"vendors":132},[49,77,106],{"slug":50,"name":51,"problem":52,"products":53},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[54,62,69],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":50,"product_name":66,"url":67,"description":68},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"slug":78,"name":79,"problem":80,"products":81},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[82,90,98],{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"slug":107,"name":108,"problem":109,"products":110},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[111,119,127],{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":128,"product_name":129,"url":130,"description":131},"idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",[],{"slug":134,"title":135,"body":136,"framework_refs":137,"framework_notes":150},"stolen-credentials-expose-metas-github-repos-and-personal-data","Stolen Credentials Expose Meta's GitHub Repos and Personal Data","Hackers leveraged stolen employee credentials to gain unauthorized access to Meta's GitHub repositories, exposing proprietary source code and personal data that had been improperly stored on the platform. The root failure is twofold: inadequate credential protection allowed initial access, and poor data hygiene meant sensitive personal information was unnecessarily present in a code repository. This incident highlights that code repositories are high-value targets that must be treated with the same rigor as production systems. Storing personal or sensitive data in source control is a critical misconfiguration that dramatically escalates the impact of any credential compromise.",[138,139,140,141,142,143,144,145,146,147,148,149],"CIS Control 5: Account Management","CIS Control 6: Access Control Management","CIS Control 3: Data Protection","CIS Control 16: Application Software Security","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 IA-5: Authenticator Management","NIST SP 800-53 SI-12: Information Management and Retention","GDPR Article 5(1)(f): Integrity and Confidentiality","GDPR Article 32: Security of Processing","NIST CSF PR.AC-1: Identity and Credential Management","NIST CSF PR.DS-1: Data-at-Rest Protection",{}]