12 articles
Approving a command with "don't ask again" can save the API key inside it to a project file. GitGuardian counted 31,088 such secrets on public GitHub and more in Docker Hub images. How it happens, why deleting the file is not enough, and what to rotate.
A shared credential is only as safe as the weakest account that can open it. Team owners can now require two-factor authentication for every member, and require it of the people who open the team's shares.
Chainalysis's incident page went from no evidence of token access to password hashes and live tokens for all users exposed in under a week. What happened, what customers must do, and how to make a forced key rotation a short task.
LiteLLM's root cause analysis traces the malicious 1.107.0 release to an administrative key that was removed from a public repository in May but never revoked. How one forgotten key reached the release pipeline, and the habits that close the gap.
Google Threat Intelligence and Mandiant describe attackers turning stolen cloud and AI credentials into up to $1 million in model charges. How they got in, what they did with the access, and the habits that stop it.
Cisco Talos describes VOLTA, a Windows infostealer that takes passwords, cookies, Slack sessions and cloud keys, then asks an AI model to rank what each victim is worth. What it steals, how the AI step works, and what limits the damage.
Attackers took over Microsoft 365 mailboxes at 79 organisations without guessing a password or defeating MFA, by replaying stolen sign-in tokens. How it worked, why a password reset was not enough, and what to check.
Security training tells people to distrust short links from domains they don't know, which is exactly what a secure-sharing link used to look like. Enterprise teams can now send share and request links on a subdomain they own.
A MongoDB researcher scanned 7.25 million public Gitee repositories and found 26,400 credentials that still worked, from cloud keys to AI-service keys. What leaked, why two scanners found different halves, and what GitHub just changed.
A campaign tracked by Wiz Research uses stolen GitHub tokens to plant workflows that print repository secrets into their own logs. How it works, why private repositories were exposed, and what to check and rotate now.
Every secrets manager needs one first credential delivered by hand, and it is the one most likely to end up in a chat window. Why that happens, how machines avoid it, and how to hand it to people safely.
Learn how CredenShare uses AES-256 encryption, automatic data scrubbing, and granular access controls to protect your most sensitive credentials.
