[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUH2rpYlkKOXZI5uyrf3M9WlKthtUcQqpilFAImGSb_s":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"status":20,"created_at":21,"published_at":22,"article":23,"tags":27,"podcasts":40},"6c94784a-d738-4c4f-a22e-e339c4548d16","uae-websites-source-code-and-credentials-exposed-on-cybercrime-forum","7b6f923d-3467-49f6-9673-ab830b661a39","UAE Websites Source Code and Credentials Exposed on Cybercrime Forum","Multiple UAE websites suffered a significant breach where their source code, including PHP samples and GitHub Personal Access Tokens, were leaked on a cybercrime forum. This incident demonstrates how poor credential management and inadequate access controls can lead to extensive intellectual property theft and supply chain compromise. The exposed GitHub tokens could allow attackers to access private repositories, modify code, or pivot to other connected systems, creating cascading security risks across the software development lifecycle.","**Immediate actions:**\n- Organizations should have implemented secrets management solutions to avoid hardcoding credentials in source code, established secure code repositories with multi-factor authentication, and conducted regular security audits of their development infrastructure\n\n**Long-term improvements:**\n- This breach could have been prevented through proper credential lifecycle management, including regular rotation of GitHub Personal Access Tokens and implementation of fine-grained access controls with minimal necessary permissions\n\n**Detection measures:**\n- implementing code scanning tools to detect exposed secrets before deployment and establishing proper incident response procedures for credential compromise would have minimized the impact",[12,13,14,15,16,17,18,19],"CIS Control 5","CIS Control 6","NIST AC-2","NIST AC-6","NIST SA-15","NIST SR-3","ISO 27001 A.9.2","ISO 27001 A.14.2","published","2026-03-27T18:07:39.030218+00:00","2026-03-27T18:07:38.843+00:00",{"id":7,"url":24,"slug":25,"title":26},"https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2037578907977744838","source-code-from-multiple-uae-websites-has-allegedly-been-leaked-on-a-popular-cy","‼️🇦🇪 Source code from multiple UAE websites has allegedly been leaked on a popular cybercrime f...",[28,34],{"id":29,"name":30,"slug":31,"description":32,"color":33},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":35,"name":36,"slug":37,"description":38,"color":39},"f0c2a0af-58aa-4128-87c9-6acd30f2dc48","Supply Chain","supply-chain","Third-party risk, compromised dependencies","#8b5cf6",[]]