Welcome to Blumira Briefings, your top headlines and trends for your security practice.

This week's episode:

- Government Contractor Exposes Sensitive CISA and AWS GovCloud Credentials on Public GitHub
- Drupal Issues Critical Security Update Amid Warnings of Rapid Exploit Development Risk
- Shai-Hulud Worm Clones Emerge After Source Code Leak, Intensifying NPM Supply Chain Attacks

Have a security topic you want us to cover? Let us know in the comments!

Sources:

Contractor’s public GitHub account exposed GovCloud and CISA credentials
https://www.csoonline.com/article/4173305/contractors-public-github-account-exposed-govcloud-and-cisa-credentials.html
--
Drupal is rolling out an emergency security update on May 20. You cannot miss it
https://securityaffairs.com/192407/security/drupal-is-rolling-out-an-emergency-security-update-tomorrow-you-cannot-miss-it.html
--
Shai-Hulud worm copycats emerge after source code leak
https://securityaffairs.com/192366/malware/shai-hulud-worm-copycats-emerge-after-source-code-leak.html