InfoSecBulletin Cybersecurity for mankind
The New York Times’ internal source code and data were leaked on the 4chan message board. The new work times confirmed to Bleeping Computer that they were stolen from the company’s GitHub repositories in January 2024.
An anonymous user leaked internal data on Thursday. They posted a torrent containing a 273GB archive of the stolen data, as revealed by VX-Underground.
Microsoft Patches Four Critical Azure and Power Apps Vulns
Qilin Ransomware topped April 2025 with 45+ data leak disclosures
SonicWall Patches 3 Flaws in SMA 100 Devices
Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed
Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA
CVE-2025-29824
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day
Hacker exploited Samsung MagicINFO 9 Server RCE flaw
CISA adds Langflow flaw to its KEV catalog
Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers
UAP hosted “UAP Cyber Siege 2025”, A national level cybersecurity competition
“Basically all source code belonging to The New York Times Company, 270GB,” reads the 4chan forum post.
The attacker shared a text file with a list of 6,223 folders stolen from the company’s GitHub repository.Many different types of information were stolen, such as IT documentation, infrastructure tools, and source code. This includes the popular Wordle game.
According to the ‘readme’ file, the attacker used a GitHub token that was exposed to gain unauthorized access to the company’s repositories and steal data.
In a statement to BleepingComputer, The Times said the breach occurred in January 2024 after credentials for a cloud-based third-party code platform were exposed. A subsequent email confirmed this code platform was GitHub.
The company stated that the breach of its GitHub account did not affect its internal corporate systems and had no impact on its operations.
