Coding Agents Copy Your Secrets to a Hidden File. Thousands Are on GitHub
Shmulik Cohen and Matan Giladi write: Apiiro research found 2,539 real secrets in 1,994 public GitHub repositories: database passwords, cloud keys, API tokens, SSH root logins. Among them: a database vendor’s own admin-level cloud key, a production Azure Postgres password, a Square production token, and the owner password of a medical-records database. 63 organizations, mostly...
- Vendor
- Microsoft
- Product
- Azure, PostgreSQL
- Exposure class
- Cloud platform, Database
Why it ranks 28 (Notable)
- Product class: cloud platform, database
- Widely deployed vendor product (Microsoft)
- Reporting
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- DataBreaches.net (databreaches.net)