Skip to content
Threat Feed
Subscribe

Product

GitHub (Organization and Enterprise)

1 brief RSS
high advisory

GitHub: Unauthorized SSH Certificate Authority or Requirement Modification

Adversaries who compromise an organization or enterprise owner account may disable mandatory SSH certificate requirements or destroy certificate authorities to facilitate persistence and defense evasion by enabling the use of unmanaged SSH keys.

GitHub saas persistence defense-evasion access-control
2t