26,400 working cloud and AI keys found in public Gitee repos
A scan of 7.25 million repositories kept only keys that still authenticated, led by 9,473 Alibaba Cloud AccessKey pairs.
A scan of 7.25 million repositories kept only keys that still authenticated, led by 9,473 Alibaba Cloud AccessKey pairs.
A 2026 comparison ranks ten secrets-detection tools, from GitGuardian and TruffleHog to free GitHub and Gitleaks scanning.
Truffle Security found 543,699 still-valid credentials exposed in public GitHub repositories.
Truffle Security verified 543,699 credentials still active after exposure in public GitHub repositories.
Truffle Security found 543,699 still-active credentials exposed in public GitHub repositories, many years old.
Truffle Security found 543,699 still-valid credentials exposed in public GitHub code.
Truffle Security found 543,699 still-valid credentials exposed in public GitHub repositories.
Truffle Security launched TruffleHog AWS Analyze, which maps leaked AWS keys' permissions and role assumptions; research found 88% of 64,024 leaked keys still active.
Truffle Security researchers discovered more than 9,000 publicly accessible and active AWS key pairs, creating credential exposure and account-takeover risks.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.2K readers · 1.9K views · 1.4K reads · all time 160K views