Researcher finds over 100 serious vulnerabilities in public UK government code
Overview
Security researcher Chris Nesbitt-Smith of ControlPlane found more than 100 serious vulnerabilities in publicly available UK government code, using Anthropic's Claude Opus and Sonnet models on a laptop, Wired reports.
The most serious case involved an unexpired login that the Planning Inspectorate committed to GitHub. Nesbitt-Smith says it would have given wide read and write access to SharePoint, employee OneDrive and HR records.
Wired reports that the findings put sensitive government data at risk through poor cyber hygiene.
Written by AI from the articles below · updated Nov 10, 2:53 AM ET
Check the sources:
Article timeline
The articles in this story. Times are ET.
- Wired · AINewsSecurity Flaws Across UK Government Sites Exposed ‘God-Tier’ Information
AISecurity researcher Chris Nesbitt-Smith of ControlPlane found more than 100 serious vulnerabilities in publicly available UK government code, using Claude Opus and Sonnet models on a laptop. The most serious case involved an unexpired login committed to GitHub by the Planning Inspectorate, which he says would have given wide read and write access to SharePoint, employee OneDrive and HR records.
Heat Trend
Not enough continuous observations to show a trend yet.