Over 543,000 valid credentials exposed in public GitHub repositories

2026-09-30T19:23:21Z•0b3dcfc29429956e8a66f668d2480a6b0e99b2cb51047ea0f0211bb56a582df3
CVE-2026-76504CVE-2026-88772Cisco SD-WANCitrix NetScalerClickFixGitHub secretsMikroTik RouterOSRAT malwareTeamVieweractively exploitedauthentication bypasscredential exposurecryptocurrency breachpre-authenticationprivilege escalationremote code executionsupply-chain riskweb shellszero-day

What happened

A BleepingComputer security news feed reports multiple significant threats, including actively exploited zero-days in Cisco Catalyst SD-WAN Manager and Citrix NetScaler, a critical pre-authentication RCE in MikroTik RouterOS, severe TeamViewer vulnerabilities, malware delivery through ClickFix attacks, exposed valid credentials in public GitHub repositories, and a major cryptocurrency exchange breach attributed to a third-party security product zero-day.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
bleepingcomputer
Record identifier
0b3dcfc29429956e8a66f668d2480a6b0e99b2cb51047ea0f0211bb56a582df3
Enrichment time
2026-09-30T19:23:21Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.