Security flaws in UK government open code exposed sensitive “god-tier” access risks
🤖 AI-generated content — The title and summary were produced automatically by artificial intelligence, without human editorial review.
ControlPlane researcher Chris Nesbitt-Smith found more than 100 serious vulnerabilities in UK government code published in public repositories, putting sensitive data at risk after departments neglected maintenance amid funding pressure. He used Claude Opus and Sonnet on a laptop and said many issues were basic enough for a routine IT check. The worst case was England’s Planning Inspectorate, which left login credentials in a public GitHub repo with wide, seemingly non-expiring access; exposed Microsoft Entra ID details could have granted god-tier read and write access.
Continue in the app — vote & join in ➔Source: Wired · via ahirlevel.hu