NEW YORK TIMES SOURCE CODE STOLEN USING EXPOSED GITHUB TOKEN

Summary from the TLDR InfoSec newsletter

An attacker posted an archive of stolen source code and data belonging to the New York Times onto 4chan. The leaker claims to have accessed the source code via a compromised GitHub token which was confirmed by The Times. The Times stated that the leak did not impact any internal corporate systems or operations.