Misconfiguration exposure

Surfshark says an intruder reached build credentials on an internet-exposed test server

The VPN vendor detected the intrusion on August 31 and finished remediation five days later. It says production infrastructure and customer data were untouched, and has not said which credentials, binaries or configurations sat in the exposed environment.