The Grafana data breach was caused by a single GitHub workflow token that slipped through the rotation process following the TanStack npm supply-chain attack last week. [...]
Grafana breach caused by missed token rotation after TanStack attack
Résumé + lien vers la source. Sans paywall, sans tracking.