Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

The Insecure Default Was the Configuration

I was moving a pile of automation scripts into version control — years of accumulated cron jobs that had only ever existed on one machine — and ran a secret scan before the first commit.

  • Hardcoded API key discovered in automation scripts
  • Default value served as primary configuration
  • Security scanner ineffective at detecting passwords

More from Friday 7 August →