A vital code system with a default password has been left exposed online by the EE operator, the biggest cellular network operator in the UK, which serves almost 30 million users.
According to reports, EE, the massive British mobile network, left a crucial code repository on an open-source tool that is password-protected by default.
Malicious hackers can use this to examine the source code and find weaknesses in it.
An attacker might use the keys' accessibility to examine the employee payment systems' code and find weaknesses that they could use for malevolent intent.
Source: https://securityaffairs.com/72432/data-breach/ee-operator-data-leak.html
"id": "EE410251223",
"linkid": "ee-uk",
"type": "Data Leak",
"date": "05/2018",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"