Johan Söderström

🚨‼️ BREAKING: The source code of Swedish e-government services from CGI's "E-plattform" has been leaked. A threat actor sent us samples. Our initial analysis shows the breached repositories originate from an internal CGI GitLab instance. The leak exposes architecture, microservices, and configurations for Sweden's digital public infrastructure. Leaked files: ▪️ Database passwords ▪️ Email/SMTP passwords ▪️ Keystore/truststore passwords & key passwords ▪️ SHS credentials / keystore details ▪️ Signe portal credentials/config ▪️ Embedded Git credentials ▪️ CGI staff data Key components exposed: ▪️ Mina Engagemang: Frontend and backend code (me-portals) for citizen-facing apps and case management. ▪️ Signe & e-ID: E-signature portal configs, SAML/OpenSAML metadata (keyservice), and signing workflow templates. ▪️ Företrädarregister: Authorization registry services (foreg) governing who can legally represent organizations. ▪️ SHS Integration: Routing and config files (eintegration3) for secure inter-agency data exchange. The leaked repos contain .git/config files with embedded credentials, severely elevating the risk of lateral movement or further supply chain compromise. A major exposure of the trust anchors and identity routing powering Sweden's digital state.

I’ve stayed in hotel rooms over the past week and was wondering if anyone else wishes manufacturers would write “shampoo” and “conditioner” in a bigger font so we could read them in the shower without our glasses. FFS 😖

“We kick the zios out, out, out.” SA-vibbar med trumslag framför Göteborgs universitets entré. Film: ”antizionister” framför GU i veckan. Bild: Nazisterna stoppar judiska studenter från att gå in på universitetet, Wien, 1930-tal.