CISA Credentials, Drupal Security Update, and Shai-Hulud Clones - Blumira Briefings

Welcome to Blumira Briefings, your top headlines and trends for your security practice.This week's episode:- Government Contractor Exposes Sensitive CISA and AWS GovCloud Credentials on Public GitHub- Drupal Issues Critical Security Update Amid Warnings of Rapid Exploit Development Risk- Shai-Hulud Worm Clones Emerge After Source Code Leak, Intensifying NPM Supply Chain AttacksHave a security topic you want us to cover? Let us know in the comments!Sources:Contractor’s public GitHub account exposed GovCloud and CISA credentialshttps://www.csoonline.com/article/4173305/contractors-public-github-account-exposed-govcloud-and-cisa-credentials.html--Drupal is rolling out an emergency security update on May 20. You cannot miss ithttps://securityaffairs.com/192407/security/drupal-is-rolling-out-an-emergency-security-update-tomorrow-you-cannot-miss-it.html--Shai-Hulud worm copycats emerge after source code leakhttps://securityaffairs.com/192366/malware/shai-hulud-worm-copycats-emerge-after-source-code-leak.html