Experimental News Clipping Site

Tag: .env files

  • Hacker News: Cursor uploads .env file with secrets despite .gitignore and .cursorignore

    —

    by

    Kurt Seifried
    in

    Source URL: https://forum.cursor.com/t/env-file-question/60165 Source: Hacker News Title: Cursor uploads .env file with secrets despite .gitignore and .cursorignore Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a significant vulnerability in the Cursor tool, where sensitive development secrets could be leaked due to improper handling of .env files. The author’s experience highlights the…

  • CSA: How Did AWS Credentials Compromise Millions?

    —

    by

    system automation
    in

    Source URL: https://cloudsecurityalliance.org/articles/massive-nhi-attack-230-million-cloud-environments-were-compromised Source: CSA Title: How Did AWS Credentials Compromise Millions? Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a significant cyberattack exploiting insecure AWS stored credentials, compromising over 230 million cloud environments. It highlights the methods used by the attackers, including the collection of sensitive information through exposed .env files,…