The newest Secrets & Credential Leaks resources are on the Secrets & Credential Leaks page. For a reading order instead of a date order, see the Secrets & Credential Leaks learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-11-01 2026 | Google Is Your Free APT: How I Find API Keys Without Hacking Anything intermediate OSINT | This article reveals how to find API keys and sensitive information using Google searches, effectively turning the search engine into a free "APT" (Advanced Persistent Threat) tool. The author demonstrates methods for uncovering misconfigured cloud storage buckets and other exposed data accessible through simple Google queries, without resorting to traditional hacking techniques. The focus is on leveraging Google's indexing capabilities to find publicly exposed, yet unintendedly accessible, credentials and data. |
| 2026-11-01 2026 | CyLab: Secret Box intermediate SQLi | CyLab's "Secret Box" is a medium-difficulty web exploitation challenge that presents a system designed for secure secret storage. The challenge description hints at a potential vulnerability, posing the question of whether the secrets are truly only accessible to the intended user. |
| 2026-10-31 2026 | A JWT Checklist Before You Ship Login: 5 Settings Most APIs Get Wrong beginner JWT | This content warns developers about common JWT misconfigurations that can lead to security vulnerabilities before shipping APIs that use JWTs for authentication. It highlights five critical settings most APIs get wrong, implying that addressing these can significantly improve security. The focus is on preventing exploitable flaws by ensuring proper implementation of JWT security best practices. |
| 2026-10-31 2026 | React Native Apps Should Start With Zero API Keys. Kerb Runs 52 Screens on None. intermediate API Sec | The author discovered a security vulnerability in React Native apps where API keys, even if marked as fake, can be exposed in plain text within the iOS bundle. This highlights a significant risk for applications handling sensitive credentials. The article then introduces Kerb, a React Native application that impressively operates 52 screens without utilizing any API keys, suggesting a potential alternative architectural approach to enhance security by eliminating the need for such keys altogether. |
| 2026-10-31 2026 | CWE-540 in the Wild: Hardcoded Credentials in a Production Analytics Script beginner Bug Bounty | This article highlights a critical security vulnerability, CWE-540, where hardcoded credentials were found in a production analytics script. The author emphasizes the danger of delaying security fixes, illustrating how seemingly minor oversights can lead to significant risks. The core lesson is to address such issues promptly rather than postponing cleanup. |
| 2026-10-31 2026 | Chain Reaction: From Isolated Vulnerabilities to Full System Compromise (RomHack Camp 2026) advanced Talks | Talk at RomHack Camp 2026 detailing a real-world penetration test that escalated isolated vulnerabilities into full system compromise. The presentation follows an attacker's path through exposed JavaScript secrets, session abuse, cross-application trust violations, and misconfigured CORS and WAF settings. This technical autopsy demonstrates how low-risk findings can lead to the exposure of production credentials, cryptographic keys, and complete platform control, highlighting the catastrophic potential of cascading weaknesses. |
| 2026-10-31 2026 | SSRF in Harbor Webhooks exposes cloud credentials intermediate 4 min read SSRF | Writeup on CVE-2026-XXXX (SSRF in Harbor Webhooks), a vulnerability where any registered user can create a webhook targeting cloud metadata endpoints like `169.254.169.254` to exfiltrate IAM credentials. The flaw, affecting Harbor versions >= 1.7.0 with fixes in v2.13.6+, v2.14.5, v2.15.3, and v2.16.0, bypasses RBAC by leveraging the Harbor instance's cloud identity, enabling attackers to access sensitive resources and potentially compromise tenant data on shared instances. → ox.security |
| 2026-10-30 2026 | [tl;dr sec] #352 - Unprompted Slides, AWS AI Post-compromise Trends, Malicious LLM API Routers news 8 min read AI | Library for AI and cloud security research, featuring talks from [un]prompted con on AI-assisted firmware analysis and patching using GPT-5.6 Sol, and using AI "Security Constitutions" to find cloud design flaws. It also details Azure cross-tenant compromise vulnerabilities, LLM behaviors with AWS credentials, and RCE exploitation techniques like StealMyBitcoin-PoC and the rikugan tool integrating LLMs into disassemblers. → tldrsec.com |
| 2026-10-29 2026 | Scanning 7.25 Million Public Repositories on China's Largest Git Platform for Secrets news 6 min read | Analysis of 7.25 million public Gitee repositories reveals 26,400 unique, verified-live credentials using a dual-scanner approach with TruffleHog and Kingfisher. Findings included active organization-admin credentials for an AI platform and thousands of cloud provider access keys, with Alibaba Cloud AccessKey pairs being the most common. The study highlights Gitee's significant credential exposure, surpassing Western platforms in raw count and density, and notes the complementary detection capabilities of TruffleHog and Kingfisher. |
| 2026-10-29 2026 | Rotating 1,000 Service Account Passwords With Zero Outages: Why the Inventory Comes First beginner 8 min read | Library for managing service account credentials, emphasizing an inventory-first approach before rotation. It details how controls built for human users fail with machine identities, leading to silent failures and credential sprawl across repositories, config files, and chat platforms. The SCALER framework is introduced, comprising six stages: Scale, Classify, Assign, Lifecycle, Enforce, and Rotate, designed to prevent outages during large-scale password rotations. → blog.gitguardian.com |
| 2026-10-27 2026 | OWASP Top 10 Kubernetes Security Risks Explained: Why Credentials Deserve a Closer Look beginner 12 min read API Sec | Library for securing Kubernetes, addressing the OWASP Kubernetes Top 10 risks. It highlights K03, Secrets Management Failures, detailing how credentials can be exposed through container images, ConfigMaps, environment variables, code repositories, and logging. The resource emphasizes that leaked tokens, as seen in GitGuardian investigations and the GhostAction campaign, can unlock access to 44 active clusters. It advocates for techniques like strict RBAC, short-lived workload identity, and credential detection using tools such as ggshield to mitigate these risks. → blog.gitguardian.com |
| 2026-10-26 2026 | I never authorized an integration that scans my secrets beginner 3 min read | Issue detailing a Home Assistant integration that, by default, scans for secrets and sends hashed data to Have I Been Pwned (HIBP). While the feature can be disabled via `ha security options --pwned=false` and hashes are locally processed before being sent, the discussion highlights concerns about unauthorized scanning and the need for explicit opt-in mechanisms for such security checks. |
| 2026-10-26 2026 | Gheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles intermediate 6 min read Supply Chain | Library for detecting and responding to the Gheist campaign, which attempts to steal secrets by planting malicious `sync-check.yml` workflows in GitHub repositories using compromised tokens. The campaign has evolved to exploit environment-scoped secrets and even target self-hosted runners, exfiltrating credentials for cloud providers like AWS, GCP, and Azure. Security teams can hunt for `ci-sync-*` branches and `gheist` user agent activity, and should rotate secrets and revoke compromised tokens. → wiz.io |
| 2026-10-23 2026 | eMudhra CA compromise: eight private keys, and one of them is 4 news 7 min read | Library for detecting and remediating the eMudhra CA compromise, where eight private keys were improperly generated and easily guessable, including one as simple as the number 4. This vulnerability allowed for the signing of valid certificates for any domain, impacting command-line tools like `curl` and `git`, container images, and language runtimes that did not automatically update their certificate bundles or check for revocation. The library helps identify affected container images and provides remediation steps to update CA bundles. → aikido.dev |
| 2026-10-22 2026 | LiteLLM Compromised, Steals Credentials news 5 min read Supply Chain | Analysis of the LiteLLM compromise reveals a malicious version (1.107.0) uploaded to PyPI and Docker, featuring a credential stealer targeting browser, cloud, and AI secrets, alongside dormant C2 capabilities. Attackers leveraged stolen GitHub CLI OAuth tokens, gained through access to an exposed internal LiteLLM deployment, to inject trojanized code via commits to a hidden repository. The payload utilizes `.pth` files and `sitecustomize.py` to exfiltrate encrypted secrets to an attacker-controlled domain, targeting credentials from browsers, AWS, GCP, Azure, and LLM API providers. Post-exploitation activity includes validation of harvested AWS credentials for LLM-jacking and enumeration of IAM resources. → wiz.io |
| 2026-10-22 2026 | LiteLLM compromised again: infostealer and RAT found in version 1.107.0 news 5 min read Supply Chain | Writeup detailing the compromise of LiteLLM version 1.107.0, where malicious code was injected into its Python wheels on PyPI and its Docker image. The attack inserted an infostealer to exfiltrate credentials and secrets and a remote access trojan (RAT) for arbitrary code execution. Indicators include the presence of files like `/tmp/.pc_once_*` and `/tmp/remote_code_loader.lock`. The compromise was achieved by exploiting a directive in the `pyproject.toml` build configuration. → aikido.dev |
| 2026-10-22 2026 | What Is Credential Layer Security? The Layer Every Other Control Trusts beginner 17 min read | Library explaining credential layer security, which encompasses all surfaces where secrets like passwords and API keys can exist, from code and cloud infrastructure to laptops and SaaS applications. It details how protecting this layer involves discovering, prioritizing, remediating, preventing spread, and detecting harvesting of credentials, working in conjunction with identity and access management (IAM) and other security controls. The library also highlights the increased risks posed by endpoints and AI agents, and the importance of understanding credential scope and deterministic controls, referencing supply chain attacks like Shai-Hulud as examples of credential layer exploitation. → blog.gitguardian.com |
| 2026-10-22 2026 | Scanning AI Assets: Catching What SCA and SAST Might Miss intermediate 6 min read AI | Library for scanning AI assets like agent skills, plugins, and APM manifests, which traditional SCA and SAST tools may miss. It focuses on the intent and instructions within these assets, detecting threats such as prompt injection, hidden instructions, obfuscated payloads, and credential exfiltration, as exemplified by an evasion framework that bypassed eight scanners. The library integrates with JFrog Artifactory, performing both deterministic and semantic scanning to translate findings into actionable policies enforced at the agent level. → jfrog.com |
| 2026-10-22 2026 | “Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities intermediate 11 min read AI RCE | Analysis of a threat actor's operational environment reveals the weaponization of AI assistants for various cybercrimes, including credential theft, VoIP fraud, Wi-Fi password cracking, and cryptocurrency reconnaissance. This actor, using tools like the Hermes Agent framework with DeepSeek V4, executed targeted attacks against Indian universities, exfiltrating thousands of personal records. The AI provided detailed planning, reconnaissance reports, and step-by-step advice, enabling attacks that previously required more advanced skills. The emergence of this AI-assisted toolchain highlights a growing trend among cybercriminals seeking low-cost, easily accessible, and less restricted AI capabilities. → unit42.paloaltonetworks.com |
| 2026-10-20 2026 | Leaked API Keys in LLMs: How AI Agents Expose Secrets news 10 min read AI | Library for securing AI agent workflows; it prevents LLM API key leakage by scanning prompts, tool calls, and output before secrets reach the model. It addresses issues like Qwen3-27B, GPT-Codex 5.3, and Claude Haiku 4.5 reproducing real leaked keys, and AI agents pulling secrets from developer endpoints like .env files and shell history. The library includes AI Hooks and Developer Endpoint Protection to reduce plaintext credentials accessible to agents. → blog.gitguardian.com |
| 2026-10-19 2026 | Anthropic’s Free OSS Scanner: What It Means For Your Team news 7 min read Supply Chain | Library that provides free, opt-in vulnerability scanning for open-source projects using Anthropic's Claude Mythos models. OSS Scanner identifies vulnerabilities, proposes patches, and reports findings directly to maintainers. The service signifies a shift in application security, moving the bottleneck from vulnerability discovery to the large-scale, responsible remediation of AI-generated fixes, as attackers also leverage advanced AI capabilities. → jfrog.com |
| 2026-10-14 2026 | Codex CLI installs a persistent, self-updating background daemon by default news 3 min read Supply Chain | Issue documenting the default opt-in installation of a persistent, self-updating background daemon by the Codex CLI, starting from version 0.157.0. This daemon, installed via npm, copies platform packages into `~/.codex/packages/app-server-daemon/` and runs independently of the CLI version. The issue highlights concerns about surprise daemon activation, decoupling from the installed CLI, and a bug in `codex app-server daemon stop` which fails to stop the updater process, requiring manual intervention. Proposals include making `daemon_auto_start` opt-in and exposing an execution receipt detailing the daemon's binary, generation, and environment. |
| 2026-10-14 2026 | AI Agent Security: Best Practices for Safe Deployment beginner 17 min read AI | Library detailing best practices for AI agent security, focusing on the unique risks posed by non-human identities (NHIs) and their credential management. The guide addresses the incident landscape across three attack surfaces: host, identity, and the agent itself, highlighting the critical need for sandboxing, granular credential scoping per agent, and robust identity governance. It references concepts from OWASP's LLM Top 10, specifically Prompt Injection and Excessive Agency, and mentions tooling such as nono and Bromure for credential isolation, alongside native sandbox settings for Claude Code, Cursor, and GitHub Copilot. → blog.gitguardian.com |
| 2026-10-11 2026 | GitHub Actions leaking secrets when Miri output is cached intermediate 3 min read Supply Chain | Library update addressing a vulnerability where Miri, when used with GitHub Actions caching of the `target/` directory, could leak secrets. The issue arises because Miri previously stored all environment variables to `target/`, which then persisted in the cache and could be accessed by pull requests. The fix restricts Miri to preserving only essential `CARGO_*` variables and `OUT_DIR`, mitigating the risk of secrets leaking into cached build artifacts. |
| 2026-10-11 2026 | A story of wifi secrets, UART lockdowns and a damaged flash memory chip intermediate 28 min read Mobile | Library for extracting and analyzing firmware from the Eufy HomeBase 2, version 3.4.2.2h. This process involves overcoming hardware challenges, including damaging flash memory during extraction and desoldering the chip for off-board reading. The analysis focuses on reverse engineering the Wi-Fi credential generation algorithm for the OCEAN_XXXXXX management network, identifying NVRAM variables for Wi-Fi credentials, and exploring methods to bypass UART lockdowns by reflashing a backdoored U-Boot image to gain shell access. |
| 2026-10-07 2026 | Secrets Management Best Practices: 6 Reasons Your Vault Needs Detection beginner 15 min read | Library for secrets detection and management, this resource highlights the critical need for both secrets vaults and detection tools. Secrets vaults centralize and protect credentials, enforcing access policies and recording usage, while secrets detection continuously scans code, configurations, and platforms for exposed secrets outside the vault. Combining these capabilities provides a comprehensive inventory of all credentials, enabling faster remediation of security incidents, satisfying auditor requirements by demonstrating control effectiveness, and offering robust evidence for frameworks like SOC 2 and ISO 27001. → blog.gitguardian.com |
| 2026-10-07 2026 | Why the AI Attack Surface Extends Your Stack beginner 7 min read AI AuthZ | Library for evaluating the expanded enterprise AI attack surface, moving beyond traditional perimeter security and model safety scans. It addresses how prompt injection can lead to code execution and data exposure by examining the interconnected layers of an AI deployment: the model itself, agents and tools, data and RAG pipelines, application and APIs, identity and access management, and underlying infrastructure. This library emphasizes the need to test realistic attack chains across the full application stack, combining AI-specific prompt logic with classic application, API, cloud, and identity security testing. → bishopfox.com |
| 2026-10-06 2026 | SOPS Guide: How to Encrypt and Manage Secrets in Git, Kubernetes, and CI/CD beginner 30 min read | Library for encrypting secrets within YAML, JSON, ENV, and INI files using a choice of key stores like PGP, age, AWS KMS, Azure Key Vault, Google Cloud KMS, and HashiCorp Vault. SOPS supports envelope encryption and can be integrated with GitHub Actions and Flux CD for automated decryption at build or reconcile time, ensuring plain text secrets are never committed to Git. It also provides message authentication codes to detect file tampering and can be paired with secrets managers for runtime access. → blog.gitguardian.com |
| 2026-10-02 2026 | Public Secrets Monitoring: Find a Credential Leak Beyond Your Borders news 10 min read Supply Chain | Analysis of GitGuardian's Public Monitoring Agents reveals a significant increase in hardcoded secrets within public GitHub commits, with nearly 80% of one customer's leaks originating from personal developer repositories, mirroring the CISA leak. The updated Agents Analysis provides clear verdicts to prioritize relevant incidents, organizes the monitoring queue by company relevance, and offers reasoning behind each decision, enhancing security team efficiency in identifying and addressing exposed credentials. → blog.gitguardian.com |
| 2026-09-30 2026 | Microsoft Copilot Cowork Exfiltrates Files news 5 min read AI | Writeup detailing an indirect prompt injection attack against Microsoft Copilot Cowork, demonstrating how attackers can exfiltrate files from Microsoft 365. The exploit leverages Copilot's ability to interact with Microsoft Graph and its lack of human approval for sending messages to the active user. By crafting a poisoned skill, attackers can trick Copilot into sending pre-authenticated download links for sensitive files via Teams messages, which are then exfiltrated when the victim opens them. This vulnerability, which affects models like Claude Opus 4.7, highlights the expanded attack surface of agentic products with delegated enterprise-wide authority. |
| 2026-09-30 2026 | The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub intermediate 5 min read Supply Chain | Writeup detailing a multi-platform data exfiltration attack investigated by Wiz's Blue Agent. The autonomous SOC investigator traced compromised credentials and custom Python exfiltration tools (mssql_table_export.py, pg_table_export.py, billing_export2.py) across AWS and GitHub. The investigation involved analyzing CloudTrail events, S3 data events, and GitHub audit logs, uncovering an attack chain that began with source code theft from private repositories, pivoted to AWS infrastructure, and culminated in data staging and exfiltration from a production domain controller. → wiz.io |
| 2026-09-30 2026 | Generative AI Security: Are Your Developers Pasting Secrets Into LLMs? beginner 8 min read AI | Library for scanning AI gateway traffic, integrating with GitGuardian's API to detect leaked secrets in prompts and tool calls. It operates in blocking or non-blocking modes, utilizing over 600 detectors to identify incidents before they reach third-party LLM providers, aiming to prevent leaks of sensitive information like API keys and credentials which saw an 81% increase in AI-service related incidents in 2025. → blog.gitguardian.com |
| 2026-09-28 2026 | The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments beginner 14 min read AI AuthN | Library analyzing infostealer families like Lumma, RedLine, and Vidar that target credentials, API keys, and session tokens to compromise cloud, code, and AI environments including AWS, GCP, GitHub, and OpenAI. The analysis, drawing on NordStellar data and referencing reports from Microsoft and Verizon, details how these stolen secrets bypass MFA, enable access to sensitive corporate data, and are sold by initial access brokers to ransomware cartels, highlighting the significant risks posed by compromised developer endpoints. → wiz.io |
| 2026-09-26 2026 | AI Coding Agents Are Leaking Credentials: Cursor, Claude Code, Copilot, and MCP beginner 7 min read AI | Library for discovering leaked credentials in AI coding agents like Cursor, Claude Code, and GitHub Copilot. These agents store sensitive information in configuration files, environment variables, logs, and shell history, often outside the scope of traditional repository and CI scanners. The library's analysis identified numerous valid secrets within public configuration files and a higher leak rate in commits assisted by Claude Code. → blog.gitguardian.com |
| 2026-09-25 2026 | How the GitGuardian Mixin Kit Extends Docker Sandboxes for Safer AI Coding beginner 8 min read AI | Library for integrating GitGuardian's ggshield secret-scanning hooks with Docker Sandboxes, enhancing security for AI-assisted coding. The mixin kit automatically installs ggshield and configures AI hooks for tools like Claude Code, Cursor, Codex, and GitHub Copilot. This provides two layers of protection: Docker Sandboxes isolate agent environments, while ggshield scans prompts, actions, and tool output for exposed credentials, preventing sensitive data leakage. → blog.gitguardian.com |
| 2026-09-24 2026 | VSCode's SSH Agent Is Bananas (2025) news 2 min read AuthN | Writeup on VSCode's remote SSH agent, detailing its full-scale invasion approach via a Bash snippet stager to download and run an agent over port-forwarded SSH. This agent establishes a WebSockets connection to the VSCode frontend, allowing it to wander filesystems, edit files, launch PTY processes, and persist itself, raising security concerns for development and production environments. |
| 2026-09-22 2026 | From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies intermediate 14 min read AuthZ | Reference detailing AWS's defense against compromised IAM credentials, specifically focusing on the evolution and functionality of the AWSCompromisedKeyQuarantine managed policy. It examines how AWS neutralizes exposed access keys and secrets, often in partnership with services like GitHub's secret scanning, and provides practical monitoring strategies for detecting quarantine events. The entry highlights the automated attachment of this policy to limit potential damage from unauthorized activity. → unit42.paloaltonetworks.com |
| 2026-09-19 2026 | A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity advanced 17 min read AI | Tool that allows for prompt injection attacks on AWS AgentCore Harness, potentially exfiltrating plaintext credentials managed by AgentCore Identity. The vulnerability arises from the default enablement of the built-in `shell` tool, which runs with root access and can access credentials resolved to plaintext in memory. Defense strategies include scoping `allowedTools` to necessary functions, applying least privilege to identity vault service accounts, and monitoring outbound traffic from harness containers. → unit42.paloaltonetworks.com |
| 2026-09-18 2026 | What a Supply Chain Attack Is Really After: Your Credentials beginner 5 min read Supply Chain | Ebook detailing credential harvesting as the primary objective in 2025–2026 software supply chain attacks, focusing on developer environments and CI/CD runners as valuable targets. It analyzes the propagation mechanism enabled by stolen credentials, the speed of automated distribution, and the necessary shift in incident response to account for exposed secrets like GitHub tokens, cloud credentials, and SSH keys, referencing campaigns like Shai-Hulud 2.0 and the Trivy compromise. → blog.gitguardian.com |
| 2026-09-17 2026 | Atomic macOS (AMOS) Stealer Activity beginner 6 min read Mobile | Writeup of AMOS Stealer activity on macOS, detailing a lab infection generated from a malicious "macOS toolkit" installer. The analysis includes the malware's distribution via ClickFix-like campaigns and malicious ads, its exfiltration of system information, credentials, and cryptocurrency wallet data. It highlights the constantly evolving nature of AMOS Stealer, with rapidly changing indicators, domains, and C2 infrastructure, and provides forensic artifacts and traffic patterns observed in early August 2026. → unit42.paloaltonetworks.com |
| 2026-09-09 2026 | Service Account Credential Rotation: The Blast-Radius Checklist beginner 10 min read | Checklist for rotating service account credentials, addressing the common challenge of unmanaged and fearfully unrotated secrets. It guides users through eight critical questions regarding validity, exposure, access scope, consumers, vault location, duplicate copies, ownership, and rollback plans before rotation. GitGuardian's Exploration Map is mentioned as a tool that links credentials to their incidents, permissions, consumers, and owners, enabling controlled changes rather than guesswork, particularly important given the prevalence of non-human identities. → blog.gitguardian.com |
| 2026-09-08 2026 | AI Created a Leaked Credentials Flood: Here's How We're Draining It beginner 6 min read AI | Tool that uses two AI agents to analyze public GitHub and Docker Hub incidents, providing a company-related verdict, risk score, and visible reasoning for exposed credentials. It addresses the challenge of triaging the 1.27 million AI-related exposed secrets and the 64% unrevoked secrets from 2022, offering a company-related verdict and risk score to streamline security team workflows and improve incident response productivity. → blog.gitguardian.com |
| 2026-09-06 2026 | Check My Vibe — Passive Security Scanner for Vibe-Coded Websites intermediate 3 min read AI Recon | Tool for passive security scanning of "vibe-coded" (AI-assisted) websites. Check My Vibe analyzes public HTML pages and same-origin JavaScript for visible exposure signals like exposed secrets, missing authorization, and unsafe defaults. It reviews transport behavior, security headers, public source maps, and specific file paths, offering a 36-point manual checklist for human-verifiable controls. The tool focuses on limited public evidence and does not replace source-code review or authenticated testing. |
| 2026-09-06 2026 | HOL Guard intermediate AI Supply Chain | Local-first runtime security for AI coding agents and MCP tooling. It sits between an agent and the tools it wants to run so developers can approve or deny risky shell commands, secret reads, prompt-injection-driven actions, malicious packages, and MCP changes before execution. |
| 2026-09-04 2026 | No Hack Required: How Thousands of Leaked API Tokens Left Automation Servers Wide Open news 2 min read | Writeup on leaked n8n API tokens detailing how thousands of exposed secrets in public repositories granted attackers direct access to automation servers. The analysis highlights that 321 reachable n8n instances immediately accepted leaked API tokens, demonstrating a failure in secrets management rather than a software vulnerability. Attackers leverage these compromised credentials to access integrated services like Gmail, Slack, and AWS, bypassing traditional exploit methods. The findings underscore the increasing trend of credential-based attacks and CISA's recommendations for immediate rotation of exposed secrets and implementing least-privilege access controls across all automation platforms. |
| 2026-09-03 2026 | OWASP Top 10 CI/CD Security Risks Explained: Why Credential Hygiene Decides the Outcome beginner 11 min read Supply Chain | Library detailing the OWASP Top 10 CI/CD Security Risks, highlighting how insufficient credential hygiene (CICD-SEC-6) exacerbates other vulnerabilities like dependency chain abuse and poisoned pipeline execution. It notes that since 2025, worms like Shai-Hulud and ChainDrop have targeted CI/CD runners, with 59% of machines compromised in one wave being CI/CD infrastructure. GitGuardian's approach uses tools like ggshield to secure credentials across endpoints, source control, and pipelines. → blog.gitguardian.com |
| 2026-09-03 2026 | 28000 Exposed Git Repositories Leak Credentials news 3 min read | Tool, gitreaper scans exposed .git repositories for leaked credentials like AWS access keys, Stripe API keys, OpenAI API keys, Telegram tokens, and GitHub personal access tokens. It analyzes Git object history in memory to find secrets in deleted branches and previous commits, not just current files. The tool was used to identify 28,000 exposed repositories, revealing active credentials that could lead to data theft, payment fraud, and unauthorized code access. → esecurityplanet.com |
| 2026-09-02 2026 | Credential Security: What Endpoint Protection Really Means for Secrets beginner 9 min read | Library for credential security on developer endpoints, differentiating from EDR. It discovers, remediates, and deceives with exposed secrets like cloud keys and API tokens in .env files, shell history, and AI tool directories. Unlike behavioral monitoring which catches malicious activity, this library focuses on identifying valid secrets before they are compromised, addressing the growing exposure from AI coding agents. It provides a real-time record of secrets, aids in incident scoping by pinpointing exposed credentials, and helps prevent attackers from gaining persistent access. → blog.gitguardian.com |
| 2026-09-02 2026 | 153GB of stolen credentials surface after LiteLLM supply chain attack news 3 min read | Analysis of a 153GB leaked archive from the LiteLLM supply chain attack reveals credentials for thousands of corporate domains, including AWS, Samsung, Cisco, and Salesforce. This breach, stemming from a compromised Trivy scanner, led to malicious LiteLLM versions 1.82.7 and 1.82.8 being published to PyPI, exposing secrets like AWS secret access keys and Salesforce client secrets. Organizations are urged to audit their environments for these LiteLLM versions and rotate all exposed secrets. → helpnetsecurity.com |
| 2026-09-01 2026 | AWS S3 Bucket Security: Find the Secrets Hiding Outside Git intermediate 8 min read | Library for scanning AWS S3 buckets for exposed secrets, including those within ZIP and tar.gz archives. It addresses the blind spot of accumulating logs, backups, and pipeline output in S3 without secret scanning, which attackers exploit using AI for rapid reconnaissance, as demonstrated by incidents involving IAM credentials and LLMs leading to administrative access in minutes. → blog.gitguardian.com |