Secrets & Credential Leaks
Secrets management and credential leak prevention address one of the most common and impactful security failures in modern software development. Hardcoded API keys, database passwords, cloud credentials, and private keys regularly appear in source code repositories, CI/CD configurations, container images, client-side JavaScript, and log files. Tools like TruffleHog, GitLeaks, and GitHub Secret Scanning detect exposed credentials in repositories, while vault solutions like HashiCorp Vault, AWS Secrets Manager, and cloud KMS services provide secure runtime secret injection. The impact of leaked credentials can be devastating — exposed AWS keys can lead to full cloud account compromise within minutes, and leaked database credentials can result in complete data breaches. Prevention requires secrets scanning in CI/CD pipelines, pre-commit hooks, environment-based secret injection, and credential rotation policies.
Credentials leak through history, not through the current commit
The awkward property of a leaked secret is that removing it does not unleak it. A key committed and deleted in the next commit is still in the git history, still in every clone, still in forks, and still in whatever mirrors and caches exist — and for a public repository, quite possibly in a dataset somebody built by scraping. Detection at the current HEAD finds almost nothing; scanning history is what finds the real exposure, and rotation, not deletion, is what actually remediates it.
The places secrets accumulate are predictable once you look for them. Version control history is first. CI and build logs are second and are frequently overlooked, because a variable that is masked in one job gets echoed by a debugging line in another, and logs are often more widely readable than the repository. Client-side bundles come third, and the recurring pattern is an API key embedded in JavaScript or a mobile package under the belief that minification or compilation is concealment. After that: container images with credentials baked into a layer, backups and database dumps, configuration files in deployment artifacts, Slack and ticket attachments, and cloud metadata reachable through SSRF.
Detection is a precision problem rather than a recall problem. Regex rules for well-known formats work well because providers gave their keys recognizable prefixes; generic high-entropy detection produces enormous false-positive volume and gets ignored, which is worse than not running it. Provider-side verification — checking whether a candidate key is live — is what makes a scanner's output actionable.
The structural fix is to reduce what a leak is worth. Short-lived credentials issued by a broker, workload identity federation instead of long-lived keys in CI, per-service scoping so one credential does not open everything, and monitoring for use from unexpected locations all shrink the blast radius of an exposure you did not catch. Pre-commit hooks and repository scanning reduce frequency; they will not reach zero, and planning for that is the point.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-10-27 NEW 2026 | OWASP Top 10 Kubernetes Security Risks Explained: Why Credentials Deserve a Closer Look beginner 12 min read API Sec | Library for securing Kubernetes, addressing the OWASP Kubernetes Top 10 risks. It highlights K03, Secrets Management Failures, detailing how credentials can be exposed through container images, ConfigMaps, environment variables, code repositories, and logging. The resource emphasizes that leaked tokens, as seen in GitGuardian investigations and the GhostAction campaign, can unlock access to 44 active clusters. It advocates for techniques like strict RBAC, short-lived workload identity, and credential detection using tools such as ggshield to mitigate these risks. → blog.gitguardian.com |
| 2026-10-26 NEW 2026 | I never authorized an integration that scans my secrets beginner 3 min read | Issue detailing a Home Assistant integration that, by default, scans for secrets and sends hashed data to Have I Been Pwned (HIBP). While the feature can be disabled via `ha security options --pwned=false` and hashes are locally processed before being sent, the discussion highlights concerns about unauthorized scanning and the need for explicit opt-in mechanisms for such security checks. |
| 2026-10-26 NEW 2026 | Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles intermediate 6 min read Supply Chain | Library for detecting and responding to the Gheist campaign, which attempts to steal secrets by planting malicious `sync-check.yml` workflows in GitHub repositories using compromised tokens. The campaign has evolved to exploit environment-scoped secrets and even target self-hosted runners, exfiltrating credentials for cloud providers like AWS, GCP, and Azure. Security teams can hunt for `ci-sync-*` branches and `gheist` user agent activity, and should rotate secrets and revoke compromised tokens. → wiz.io |
| 2026-10-23 NEW 2026 | eMudhra CA compromise: eight private keys, and one of them is 4 news 7 min read | Library for detecting and remediating the eMudhra CA compromise, where eight private keys were improperly generated and easily guessable, including one as simple as the number 4. This vulnerability allowed for the signing of valid certificates for any domain, impacting command-line tools like `curl` and `git`, container images, and language runtimes that did not automatically update their certificate bundles or check for revocation. The library helps identify affected container images and provides remediation steps to update CA bundles. → aikido.dev |
| 2026-10-22 NEW 2026 | LiteLLM Compromised, Steals Credentials news 5 min read Supply Chain | Analysis of the LiteLLM compromise reveals a malicious version (1.107.0) uploaded to PyPI and Docker, featuring a credential stealer targeting browser, cloud, and AI secrets, alongside dormant C2 capabilities. Attackers leveraged stolen GitHub CLI OAuth tokens, gained through access to an exposed internal LiteLLM deployment, to inject trojanized code via commits to a hidden repository. The payload utilizes `.pth` files and `sitecustomize.py` to exfiltrate encrypted secrets to an attacker-controlled domain, targeting credentials from browsers, AWS, GCP, Azure, and LLM API providers. Post-exploitation activity includes validation of harvested AWS credentials for LLM-jacking and enumeration of IAM resources. → wiz.io |
| 2026-10-22 NEW 2026 | LiteLLM compromised again: infostealer and RAT found in version 1.107.0 news 5 min read Supply Chain | Writeup detailing the compromise of LiteLLM version 1.107.0, where malicious code was injected into its Python wheels on PyPI and its Docker image. The attack inserted an infostealer to exfiltrate credentials and secrets and a remote access trojan (RAT) for arbitrary code execution. Indicators include the presence of files like `/tmp/.pc_once_*` and `/tmp/remote_code_loader.lock`. The compromise was achieved by exploiting a directive in the `pyproject.toml` build configuration. → aikido.dev |
| 2026-10-22 NEW 2026 | What Is Credential Layer Security? The Layer Every Other Control Trusts beginner 17 min read | Library explaining credential layer security, which encompasses all surfaces where secrets like passwords and API keys can exist, from code and cloud infrastructure to laptops and SaaS applications. It details how protecting this layer involves discovering, prioritizing, remediating, preventing spread, and detecting harvesting of credentials, working in conjunction with identity and access management (IAM) and other security controls. The library also highlights the increased risks posed by endpoints and AI agents, and the importance of understanding credential scope and deterministic controls, referencing supply chain attacks like Shai-Hulud as examples of credential layer exploitation. → blog.gitguardian.com |
| 2026-10-22 NEW 2026 | Scanning AI Assets: Catching What SCA and SAST Might Miss intermediate 6 min read AI | Library for scanning AI assets like agent skills, plugins, and APM manifests, which traditional SCA and SAST tools may miss. It focuses on the intent and instructions within these assets, detecting threats such as prompt injection, hidden instructions, obfuscated payloads, and credential exfiltration, as exemplified by an evasion framework that bypassed eight scanners. The library integrates with JFrog Artifactory, performing both deterministic and semantic scanning to translate findings into actionable policies enforced at the agent level. → jfrog.com |
| 2026-10-22 NEW 2026 | “Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities intermediate 11 min read AI RCE | Analysis of a threat actor's operational environment reveals the weaponization of AI assistants for various cybercrimes, including credential theft, VoIP fraud, Wi-Fi password cracking, and cryptocurrency reconnaissance. This actor, using tools like the Hermes Agent framework with DeepSeek V4, executed targeted attacks against Indian universities, exfiltrating thousands of personal records. The AI provided detailed planning, reconnaissance reports, and step-by-step advice, enabling attacks that previously required more advanced skills. The emergence of this AI-assisted toolchain highlights a growing trend among cybercriminals seeking low-cost, easily accessible, and less restricted AI capabilities. → unit42.paloaltonetworks.com |
| 2026-10-20 2026 | Leaked API Keys in LLMs: How AI Agents Expose Secrets news 10 min read AI | Library for securing AI agent workflows; it prevents LLM API key leakage by scanning prompts, tool calls, and output before secrets reach the model. It addresses issues like Qwen3-27B, GPT-Codex 5.3, and Claude Haiku 4.5 reproducing real leaked keys, and AI agents pulling secrets from developer endpoints like .env files and shell history. The library includes AI Hooks and Developer Endpoint Protection to reduce plaintext credentials accessible to agents. → blog.gitguardian.com |
| 2026-10-19 2026 | Anthropic’s Free OSS Scanner: What It Means For Your Team news 7 min read Supply Chain | Library that provides free, opt-in vulnerability scanning for open-source projects using Anthropic's Claude Mythos models. OSS Scanner identifies vulnerabilities, proposes patches, and reports findings directly to maintainers. The service signifies a shift in application security, moving the bottleneck from vulnerability discovery to the large-scale, responsible remediation of AI-generated fixes, as attackers also leverage advanced AI capabilities. → jfrog.com |
| 2026-10-14 2026 | Codex CLI installs a persistent, self-updating background daemon by default news 3 min read Supply Chain | Issue documenting the default opt-in installation of a persistent, self-updating background daemon by the Codex CLI, starting from version 0.157.0. This daemon, installed via npm, copies platform packages into `~/.codex/packages/app-server-daemon/` and runs independently of the CLI version. The issue highlights concerns about surprise daemon activation, decoupling from the installed CLI, and a bug in `codex app-server daemon stop` which fails to stop the updater process, requiring manual intervention. Proposals include making `daemon_auto_start` opt-in and exposing an execution receipt detailing the daemon's binary, generation, and environment. |
| 2026-10-14 2026 | AI Agent Security: Best Practices for Safe Deployment beginner 17 min read AI | Library detailing best practices for AI agent security, focusing on the unique risks posed by non-human identities (NHIs) and their credential management. The guide addresses the incident landscape across three attack surfaces: host, identity, and the agent itself, highlighting the critical need for sandboxing, granular credential scoping per agent, and robust identity governance. It references concepts from OWASP's LLM Top 10, specifically Prompt Injection and Excessive Agency, and mentions tooling such as nono and Bromure for credential isolation, alongside native sandbox settings for Claude Code, Cursor, and GitHub Copilot. → blog.gitguardian.com |
| 2026-10-11 2026 | GitHub Actions leaking secrets when Miri output is cached intermediate 3 min read Supply Chain | Library update addressing a vulnerability where Miri, when used with GitHub Actions caching of the `target/` directory, could leak secrets. The issue arises because Miri previously stored all environment variables to `target/`, which then persisted in the cache and could be accessed by pull requests. The fix restricts Miri to preserving only essential `CARGO_*` variables and `OUT_DIR`, mitigating the risk of secrets leaking into cached build artifacts. |
| 2026-10-11 2026 | A story of wifi secrets, UART lockdowns and a damaged flash memory chip intermediate 28 min read Mobile | Library for extracting and analyzing firmware from the Eufy HomeBase 2, version 3.4.2.2h. This process involves overcoming hardware challenges, including damaging flash memory during extraction and desoldering the chip for off-board reading. The analysis focuses on reverse engineering the Wi-Fi credential generation algorithm for the OCEAN_XXXXXX management network, identifying NVRAM variables for Wi-Fi credentials, and exploring methods to bypass UART lockdowns by reflashing a backdoored U-Boot image to gain shell access. |
| 2026-10-07 2026 | Secrets Management Best Practices: 6 Reasons Your Vault Needs Detection beginner 15 min read | Library for secrets detection and management, this resource highlights the critical need for both secrets vaults and detection tools. Secrets vaults centralize and protect credentials, enforcing access policies and recording usage, while secrets detection continuously scans code, configurations, and platforms for exposed secrets outside the vault. Combining these capabilities provides a comprehensive inventory of all credentials, enabling faster remediation of security incidents, satisfying auditor requirements by demonstrating control effectiveness, and offering robust evidence for frameworks like SOC 2 and ISO 27001. → blog.gitguardian.com |
| 2026-10-07 2026 | Why the AI Attack Surface Extends Your Stack beginner 7 min read AI AuthZ | Library for evaluating the expanded enterprise AI attack surface, moving beyond traditional perimeter security and model safety scans. It addresses how prompt injection can lead to code execution and data exposure by examining the interconnected layers of an AI deployment: the model itself, agents and tools, data and RAG pipelines, application and APIs, identity and access management, and underlying infrastructure. This library emphasizes the need to test realistic attack chains across the full application stack, combining AI-specific prompt logic with classic application, API, cloud, and identity security testing. → bishopfox.com |
| 2026-10-06 2026 | SOPS Guide: How to Encrypt and Manage Secrets in Git, Kubernetes, and CI/CD beginner 30 min read | Library for encrypting secrets within YAML, JSON, ENV, and INI files using a choice of key stores like PGP, age, AWS KMS, Azure Key Vault, Google Cloud KMS, and HashiCorp Vault. SOPS supports envelope encryption and can be integrated with GitHub Actions and Flux CD for automated decryption at build or reconcile time, ensuring plain text secrets are never committed to Git. It also provides message authentication codes to detect file tampering and can be paired with secrets managers for runtime access. → blog.gitguardian.com |
| 2026-10-02 2026 | Public Secrets Monitoring: Find a Credential Leak Beyond Your Borders news 10 min read Supply Chain | Analysis of GitGuardian's Public Monitoring Agents reveals a significant increase in hardcoded secrets within public GitHub commits, with nearly 80% of one customer's leaks originating from personal developer repositories, mirroring the CISA leak. The updated Agents Analysis provides clear verdicts to prioritize relevant incidents, organizes the monitoring queue by company relevance, and offers reasoning behind each decision, enhancing security team efficiency in identifying and addressing exposed credentials. → blog.gitguardian.com |
| 2026-09-30 2026 | Microsoft Copilot Cowork Exfiltrates Files news 5 min read AI | Writeup detailing an indirect prompt injection attack against Microsoft Copilot Cowork, demonstrating how attackers can exfiltrate files from Microsoft 365. The exploit leverages Copilot's ability to interact with Microsoft Graph and its lack of human approval for sending messages to the active user. By crafting a poisoned skill, attackers can trick Copilot into sending pre-authenticated download links for sensitive files via Teams messages, which are then exfiltrated when the victim opens them. This vulnerability, which affects models like Claude Opus 4.7, highlights the expanded attack surface of agentic products with delegated enterprise-wide authority. |
| 2026-09-30 2026 | The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub intermediate 5 min read Supply Chain | Writeup detailing a multi-platform data exfiltration attack investigated by Wiz's Blue Agent. The autonomous SOC investigator traced compromised credentials and custom Python exfiltration tools (mssql_table_export.py, pg_table_export.py, billing_export2.py) across AWS and GitHub. The investigation involved analyzing CloudTrail events, S3 data events, and GitHub audit logs, uncovering an attack chain that began with source code theft from private repositories, pivoted to AWS infrastructure, and culminated in data staging and exfiltration from a production domain controller. → wiz.io |
| 2026-09-30 2026 | Generative AI Security: Are Your Developers Pasting Secrets Into LLMs? beginner 8 min read AI | Library for scanning AI gateway traffic, integrating with GitGuardian's API to detect leaked secrets in prompts and tool calls. It operates in blocking or non-blocking modes, utilizing over 600 detectors to identify incidents before they reach third-party LLM providers, aiming to prevent leaks of sensitive information like API keys and credentials which saw an 81% increase in AI-service related incidents in 2025. → blog.gitguardian.com |
| 2026-09-28 2026 | The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments beginner 14 min read AI AuthN | Library analyzing infostealer families like Lumma, RedLine, and Vidar that target credentials, API keys, and session tokens to compromise cloud, code, and AI environments including AWS, GCP, GitHub, and OpenAI. The analysis, drawing on NordStellar data and referencing reports from Microsoft and Verizon, details how these stolen secrets bypass MFA, enable access to sensitive corporate data, and are sold by initial access brokers to ransomware cartels, highlighting the significant risks posed by compromised developer endpoints. → wiz.io |
| 2026-09-26 2026 | AI Coding Agents Are Leaking Credentials: Cursor, Claude Code, Copilot, and MCP beginner 7 min read AI | Library for discovering leaked credentials in AI coding agents like Cursor, Claude Code, and GitHub Copilot. These agents store sensitive information in configuration files, environment variables, logs, and shell history, often outside the scope of traditional repository and CI scanners. The library's analysis identified numerous valid secrets within public configuration files and a higher leak rate in commits assisted by Claude Code. → blog.gitguardian.com |
| 2026-09-25 2026 | How the GitGuardian Mixin Kit Extends Docker Sandboxes for Safer AI Coding beginner 8 min read AI | Library for integrating GitGuardian's ggshield secret-scanning hooks with Docker Sandboxes, enhancing security for AI-assisted coding. The mixin kit automatically installs ggshield and configures AI hooks for tools like Claude Code, Cursor, Codex, and GitHub Copilot. This provides two layers of protection: Docker Sandboxes isolate agent environments, while ggshield scans prompts, actions, and tool output for exposed credentials, preventing sensitive data leakage. → blog.gitguardian.com |
| 2026-09-24 2026 | VSCode's SSH Agent Is Bananas (2025) news 2 min read AuthN | Writeup on VSCode's remote SSH agent, detailing its full-scale invasion approach via a Bash snippet stager to download and run an agent over port-forwarded SSH. This agent establishes a WebSockets connection to the VSCode frontend, allowing it to wander filesystems, edit files, launch PTY processes, and persist itself, raising security concerns for development and production environments. |
| 2026-09-22 2026 | From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies intermediate 14 min read AuthZ | Reference detailing AWS's defense against compromised IAM credentials, specifically focusing on the evolution and functionality of the AWSCompromisedKeyQuarantine managed policy. It examines how AWS neutralizes exposed access keys and secrets, often in partnership with services like GitHub's secret scanning, and provides practical monitoring strategies for detecting quarantine events. The entry highlights the automated attachment of this policy to limit potential damage from unauthorized activity. → unit42.paloaltonetworks.com |
| 2026-09-19 2026 | A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity advanced 17 min read AI | Tool that allows for prompt injection attacks on AWS AgentCore Harness, potentially exfiltrating plaintext credentials managed by AgentCore Identity. The vulnerability arises from the default enablement of the built-in `shell` tool, which runs with root access and can access credentials resolved to plaintext in memory. Defense strategies include scoping `allowedTools` to necessary functions, applying least privilege to identity vault service accounts, and monitoring outbound traffic from harness containers. → unit42.paloaltonetworks.com |
| 2026-09-18 2026 | What a Supply Chain Attack Is Really After: Your Credentials beginner 5 min read Supply Chain | Ebook detailing credential harvesting as the primary objective in 2025–2026 software supply chain attacks, focusing on developer environments and CI/CD runners as valuable targets. It analyzes the propagation mechanism enabled by stolen credentials, the speed of automated distribution, and the necessary shift in incident response to account for exposed secrets like GitHub tokens, cloud credentials, and SSH keys, referencing campaigns like Shai-Hulud 2.0 and the Trivy compromise. → blog.gitguardian.com |
| 2026-09-17 2026 | Atomic macOS (AMOS) Stealer Activity beginner 6 min read Mobile | Writeup of AMOS Stealer activity on macOS, detailing a lab infection generated from a malicious "macOS toolkit" installer. The analysis includes the malware's distribution via ClickFix-like campaigns and malicious ads, its exfiltration of system information, credentials, and cryptocurrency wallet data. It highlights the constantly evolving nature of AMOS Stealer, with rapidly changing indicators, domains, and C2 infrastructure, and provides forensic artifacts and traffic patterns observed in early August 2026. → unit42.paloaltonetworks.com |
| 2026-09-09 2026 | Service Account Credential Rotation: The Blast-Radius Checklist beginner 10 min read | Checklist for rotating service account credentials, addressing the common challenge of unmanaged and fearfully unrotated secrets. It guides users through eight critical questions regarding validity, exposure, access scope, consumers, vault location, duplicate copies, ownership, and rollback plans before rotation. GitGuardian's Exploration Map is mentioned as a tool that links credentials to their incidents, permissions, consumers, and owners, enabling controlled changes rather than guesswork, particularly important given the prevalence of non-human identities. → blog.gitguardian.com |
| 2026-09-08 2026 | AI Created a Leaked Credentials Flood: Here's How We're Draining It beginner 6 min read AI | Tool that uses two AI agents to analyze public GitHub and Docker Hub incidents, providing a company-related verdict, risk score, and visible reasoning for exposed credentials. It addresses the challenge of triaging the 1.27 million AI-related exposed secrets and the 64% unrevoked secrets from 2022, offering a company-related verdict and risk score to streamline security team workflows and improve incident response productivity. → blog.gitguardian.com |
| 2026-09-06 2026 | Check My Vibe — Passive Security Scanner for Vibe-Coded Websites intermediate 3 min read AI Recon | Tool for passive security scanning of "vibe-coded" (AI-assisted) websites. Check My Vibe analyzes public HTML pages and same-origin JavaScript for visible exposure signals like exposed secrets, missing authorization, and unsafe defaults. It reviews transport behavior, security headers, public source maps, and specific file paths, offering a 36-point manual checklist for human-verifiable controls. The tool focuses on limited public evidence and does not replace source-code review or authenticated testing. |
| 2026-09-06 2026 | HOL Guard intermediate AI Supply Chain | Local-first runtime security for AI coding agents and MCP tooling. It sits between an agent and the tools it wants to run so developers can approve or deny risky shell commands, secret reads, prompt-injection-driven actions, malicious packages, and MCP changes before execution. |
| 2026-09-04 2026 | No Hack Required: How Thousands of Leaked API Tokens Left Automation Servers Wide Open news 2 min read | Writeup on leaked n8n API tokens detailing how thousands of exposed secrets in public repositories granted attackers direct access to automation servers. The analysis highlights that 321 reachable n8n instances immediately accepted leaked API tokens, demonstrating a failure in secrets management rather than a software vulnerability. Attackers leverage these compromised credentials to access integrated services like Gmail, Slack, and AWS, bypassing traditional exploit methods. The findings underscore the increasing trend of credential-based attacks and CISA's recommendations for immediate rotation of exposed secrets and implementing least-privilege access controls across all automation platforms. |
| 2026-09-03 2026 | OWASP Top 10 CI/CD Security Risks Explained: Why Credential Hygiene Decides the Outcome beginner 11 min read Supply Chain | Library detailing the OWASP Top 10 CI/CD Security Risks, highlighting how insufficient credential hygiene (CICD-SEC-6) exacerbates other vulnerabilities like dependency chain abuse and poisoned pipeline execution. It notes that since 2025, worms like Shai-Hulud and ChainDrop have targeted CI/CD runners, with 59% of machines compromised in one wave being CI/CD infrastructure. GitGuardian's approach uses tools like ggshield to secure credentials across endpoints, source control, and pipelines. → blog.gitguardian.com |
| 2026-09-03 2026 | 28000 Exposed Git Repositories Leak Credentials news 3 min read | Tool, gitreaper scans exposed .git repositories for leaked credentials like AWS access keys, Stripe API keys, OpenAI API keys, Telegram tokens, and GitHub personal access tokens. It analyzes Git object history in memory to find secrets in deleted branches and previous commits, not just current files. The tool was used to identify 28,000 exposed repositories, revealing active credentials that could lead to data theft, payment fraud, and unauthorized code access. → esecurityplanet.com |
| 2026-09-02 2026 | Credential Security: What Endpoint Protection Really Means for Secrets beginner 9 min read | Library for credential security on developer endpoints, differentiating from EDR. It discovers, remediates, and deceives with exposed secrets like cloud keys and API tokens in .env files, shell history, and AI tool directories. Unlike behavioral monitoring which catches malicious activity, this library focuses on identifying valid secrets before they are compromised, addressing the growing exposure from AI coding agents. It provides a real-time record of secrets, aids in incident scoping by pinpointing exposed credentials, and helps prevent attackers from gaining persistent access. → blog.gitguardian.com |
| 2026-09-02 2026 | 153GB of stolen credentials surface after LiteLLM supply chain attack news 3 min read | Analysis of a 153GB leaked archive from the LiteLLM supply chain attack reveals credentials for thousands of corporate domains, including AWS, Samsung, Cisco, and Salesforce. This breach, stemming from a compromised Trivy scanner, led to malicious LiteLLM versions 1.82.7 and 1.82.8 being published to PyPI, exposing secrets like AWS secret access keys and Salesforce client secrets. Organizations are urged to audit their environments for these LiteLLM versions and rotate all exposed secrets. → helpnetsecurity.com |
| 2026-09-01 2026 | AWS S3 Bucket Security: Find the Secrets Hiding Outside Git intermediate 8 min read | Library for scanning AWS S3 buckets for exposed secrets, including those within ZIP and tar.gz archives. It addresses the blind spot of accumulating logs, backups, and pipeline output in S3 without secret scanning, which attackers exploit using AI for rapid reconnaissance, as demonstrated by incidents involving IAM credentials and LLMs leading to administrative access in minutes. → blog.gitguardian.com |
| 2026-08-31 2026 | Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chain intermediate 5 min read Supply Chain | Library for correlating developer identities with personal public repositories to discover and validate exploitable secrets leaked through accidental exposure. It addresses blind spots in traditional AppSec programs by mapping attack paths from exposed credentials to cloud resources, offering exploitability validation with an AI-powered attacker, and enabling rapid remediation by linking findings directly to responsible developers and workflows. This approach helps security teams prioritize real risks and manage secret exposure beyond organizational boundaries, particularly as AI accelerates code sharing. → wiz.io |
| 2026-08-28 2026 | AI Agent Threat Response: Why Pre-Runtime Controls Matter More Than Runtime Detection intermediate 13 min read AI | Library for securing AI agents, focusing on pre-runtime controls over solely runtime detection. It emphasizes limiting an agent's access to credentials and systems before execution, arguing that at machine speed, runtime detection is often too late. The library supports discovery and remediation of exposed secrets, enforcement of AI guardrails, and the use of honeytokens, in conjunction with runtime monitoring for unpredictable behaviors like prompt injection, goal hijacking, and memory poisoning, referencing techniques seen in Shai Hulud and Nx "s1ngularity" attacks. → blog.gitguardian.com |
| 2026-08-25 2026 | Tata’s B2B platform returned OTPs in API responses news 2 min read API Sec | Writeup on an account takeover vulnerability in Tata’s B2B platform, Tata nexarc. An API endpoint, "CheckForUsersRegisteredWithEmailOrMobileNoAndSendOTP.do," insecurely returned the one-time password (OTP) in plaintext within encrypted API responses. This allowed attackers to bypass OTP verification by decrypting the response using client-side JavaScript and extracting the "otpGeneratedForMobile" field, granting them administrative access to company accounts, including those for Tata Steel. |
| 2026-08-21 2026 | Machine-Speed Credential Abuse: What the ChainDrop npm Worm Changes advanced 9 min read AI Supply Chain | Library for detecting exposed credentials across the SDLC; prioritizes remediation by validity and severity, and uses AI hooks to prevent agents from accessing secrets, addressing the machine-speed credential abuse exemplified by the ChainDrop npm worm. This worm, part of the Shai-Hulud attack, compromised 444 npm packages and leveraged malicious hooks in Claude Code and VS Code to trigger execution at machine speed, collapsing the time between credential discovery and abuse to near-zero, effectively removing human reaction windows. → blog.gitguardian.com |
| 2026-08-21 2026 | Identity Abuse Through Trusted Communication Channels news 13 min read AuthN OSINT | Library for detecting and defending against identity abuse within enterprise collaboration platforms like Microsoft Teams and Slack. This resource highlights how threat actors exploit trusted communication channels for identity phishing, impersonation, credential theft, and malware delivery, using techniques such as masquerading DLLs for sideloading attacks and adversary-in-the-middle proxies to capture corporate credentials. It provides practical recommendations for securing these platforms, which have become significant parts of the enterprise attack surface. → unit42.paloaltonetworks.com |
| 2026-08-19 2026 | Why Secrets Slip Through Every Layer of Your Security Stack intermediate 5 min read | Ebook tracing the secrets problem across specialized security stack territories, detailing how API keys and other credentials traverse laptops, repos, pipeline logs, tickets, and config files. It highlights that 28% of incidents occur outside repositories in collaboration tools and 64% of secrets remain valid for years, underscoring the lack of cross-tool context for effective revocation and remediation. → blog.gitguardian.com |
| 2026-08-18 2026 | Credential Exposure and the Security Stack Gap beginner 5 min read | Ebook tracing credential exposure across fragmented security stacks, highlighting how secrets move between repositories, pipeline logs, tickets, and configurations. It discusses GitGuardian's State of Secrets Sprawl 2026 findings, noting 28% of incidents occur outside repos and 64% of exposed secrets remain valid for years, emphasizing the need for cross-tool visibility. → blog.gitguardian.com |
| 2026-08-17 2026 | Show HN: Laptop is the last place your secrets are still in plaintext beginner 13 min read | Tool for managing local secrets on macOS Apple Silicon, `jit` encrypts plaintext secrets like `.env` files and AWS credentials into a local vault secured by Touch ID. It then rewrites configuration files to present decoys on disk, injecting real secrets into memory only for authorized processes, preventing exposure from accidental `curl | sh` commands or compromised AI agents. `jit` supports various injection mechanisms including environment variables, credential helpers for tools like AWS and Docker, and named-pipe mounts for file-based readers. |
| 2026-08-17 2026 | Leaked Secrets and Unlimited Miles: Hacking the Largest Airline and Hotel Rewards Platform intermediate 25 min read AuthZ | Writeup detailing vulnerabilities found in points.com, the backend provider for numerous airline and hotel rewards programs. The findings include an unauthenticated directory traversal allowing access to millions of customer order records containing sensitive data like partial credit card numbers and authorization tokens. Another vulnerability enabled reward points transfer and customer information leakage using only a rewards number and surname. Leaked tenant credentials for the Virgin Rewards program allowed API request signing, and a weak Flask session secret granted full access to the global administration console. → samcurry.net |
| 2026-08-16 2026 | CI/CD Credential Exposure: What Attackers Steal From Pipelines and What to Rotate beginner 10 min read | Library detailing CI/CD credential exposure, encompassing leaked secrets like cloud keys and access tokens through dependencies, logs, artifacts, workflow files, and platforms. It analyzes the LiteLLM supply chain attack, attributed to TeamPCP, which potentially exposed thousands of organizations and pipelines, highlighting how attackers steal seven major credential classes including VCS credentials and AI provider keys. The library explains credential leakage paths such as malicious dependencies, workflow injection, logs, CI platform compromise, over-scoped tokens, and self-propagating worms, while also discussing detection challenges due to theft occurring during legitimate build processes and the efficacy of memory scraping over log masking. → cloudsek.com |
| Browse all 272 Secrets & Credential Leaks resources → | ||
Frequently Asked Questions
- How do secrets leak into code repositories?
- Secrets commonly leak through developer mistakes: hardcoding API keys during development, committing .env files, leaving credentials in test fixtures, pasting tokens into comments, or including secrets in Docker build arguments. Even if removed in later commits, secrets persist in git history unless the repository is rewritten with tools like git-filter-repo or BFG Repo Cleaner.
- What tools detect leaked secrets?
- TruffleHog and GitLeaks scan git repositories for high-entropy strings and known credential patterns. GitHub Secret Scanning alerts on known token formats from partner services. Pre-commit hooks using detect-secrets or gitleaks can prevent commits containing secrets. For CI/CD, tools like talisman and SpectralOps provide pipeline-level scanning.
- What should you do when a secret is leaked?
- Immediately rotate the compromised credential — assume it has been captured. Revoke the old key, generate a new one, and update all systems using it. Then remove the secret from git history if it was committed. Review access logs for the compromised credential to assess if it was exploited. Finally, implement prevention measures to stop future leaks.
Weekly AppSec Digest
Get new resources delivered every Monday.