Grafana: Investigation reveals that recent security incidents have not affected customer production systems and operations
The open-source data visualization tool Grafana has released the latest progress on the investigation of the security incident on May 16. The investigation found that this incident was limited to the GitHub environment of Grafana Labs, including both public and private source code as well as internal GitHub repositories, and did not affect customer production systems, operations, or the Grafana Cloud platform. The downloaded content, in addition to the source code, also included some repositories used by the team for collaboration and storage of internal operational information and business details, involving business contact names and email addresses, rather than data from production systems or the cloud platform.
Grafana Labs has made it clear that the codebase was downloaded but not tampered with, and currently, customers and open-source users do not need to take any action. The incident originated from a TanStack npm supply chain attack conducted through the Mini Shai-Hulud campaign. Grafana Labs detected malicious activity on May 11 and initiated an emergency response, but a credential was overlooked, allowing the attacker to gain access. After receiving a ransom demand on May 16, the company decided not to pay the ransom and has rotated automated credentials, implemented enhanced monitoring, audited all commits since May 11, and significantly strengthened GitHub security configurations. The company has notified federal law enforcement, and the investigation is ongoing.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Anthropic signs a $200 billion contract with Google Cloud, Alphabet's market value briefly surpasses Nvidia

Google Cloud and the Solana Foundation launch the AI agent pay-per-use system Pay.sh

Alibaba Cloud: Enterprise-level Agent Construction Platform JVS Crew Launched

0G Foundation has partnered with Alibaba Cloud to launch on-chain access to the Qianwen large model for AI agents

WORLD3 releases AI strategic white paper: has processed over 100 billion LLM tokens

Tencent Cloud Industry Architect Alan Nie: The dual engines of Cloud + AI drive the breakthrough of infrastructure and R&D efficiency bottlenecks in Web3

ChainCatcher Hong Kong Forum officially opens today, focusing on the new paradigm of the integration of cryptocurrency and smart economy

Countdown 5 days | ChainCatcher Hong Kong Forum is about to open, focusing on the new paradigm of the integration of cryptocurrency and smart economy

OpenAI and Anthropic, both pre-IPO, want to keep brawling

South Korean payment giant NHN KCP collaborates with Avalanche to build a payment-dedicated L1 network

The AI payment protocol x402 under Coinbase has joined the Linux Foundation, receiving support from several institutions including Google, Stripe, and AWS

Landscape Fund strategically invests in Zhihui Cloud World, increasing investment in China's AI intelligent computing power infrastructure

Steakhouse Financial: Currently addressing the DNS hijacking attack incident, the front end has not yet recovered but the funds of depositors are safe

HashKey Cloud has launched a three-month fee-waiver plan for staking, helping stakers deal with Ethereum's exit queue delay.

Tariff Clouds Part, Is the Bull Market's Bugle Call Sounding Again?

The Minnesota-based credit union will launch the Cloud Dollar stablecoin

The Chip Industry's Most Secure Middleman Just Took a Very Risky Turn

The modular blockchain Origins Network has completed a strategic financing of 8 million USD, with participation from Animoca Brands and others

How a Risk-Controlled AI Crypto Trading Bot Protects Capital in Real Markets
Ritmex demonstrates how disciplined risk control and structured signals can make an AI crypto trading bot more stable and reliable on WEEX, highlighting the importance of combining execution discipline with scalable AI trading systems.

The three major U.S. stock indices fell over 1% on the day of the Federal Reserve's interest rate decision

Analysis: Huang Renxun needs to prove Groq's integration roadmap today, otherwise the custom chip narrative will prevail

Cambridge Research: Bitcoin can withstand a break in global undersea cables below 72%, but targeted attacks on the five major custodial service providers could lead to network paralysis

Anthropic announces $100M investment in partner network Claude

Decentralized cloud infrastructure Akave completes $6.65 million funding, with participation from Avalanche Foundation and others

Alibaba Cloud Launches Clawdbot Full-Service Cloud Solution

Original Content Blocked: Importance of API Management
Key Takeaways: API management is crucial in preventing disruptions due to excessive requests. Implementing effective controls and monitoring…
Is the WEEX AI Trading Hackathon Worth Joining? $1.88M Prize Pool and Rules Explained
An AI trading competition with a $1.88M prize pool — explore WEEX AI Trading Hackathon rules, OpenAPI trading, and AI-only participation requirements.

Payment Going Global: The Honest Man's Endurance Race

NVIDIA to Acquire AI Chip Startup Groq for About $200 Million in Cash, Its Largest Acquisition

How HashKey Intends to Pave the Way as Hong Kong’s Premier Crypto IPO
Key Takeaways HashKey aims to be Hong Kong’s first fully crypto-native Initial Public Offering (IPO), with plans to…


