26,400 working cloud and AI keys found in public Gitee repos
A scan of 7.25 million repositories kept only keys that still authenticated, led by 9,473 Alibaba Cloud AccessKey pairs.
74
Product
TruffleHog
- Mentions · 7d2
- Mentions · 30d4
- All mentions7
- First seenSep 11, 2026
- Last mentioned1d ago
Timeline
7 articles · newest first26,400 live credentials found scanning 7.25M Gitee repos
TruffleHog and Kingfisher verified cloud keys and an unnamed enterprise AI platform's organization-admin credential.
71
10 Best Secrets Detection Tools Compared (2026): Features & Pricing
A 2026 comparison ranks ten secrets-detection tools, from GitGuardian and TruffleHog to free GitHub and Gitleaks scanning.
18
Top 10 Best Secrets Detection Tools in 2026 [Ranked & Scored]
A 2026 ranking of secrets-detection tools puts GitGuardian first, then TruffleHog and GitHub.
15
Hackers abused Claude to extract secrets from 1.8M Android apps
Anthropic reports ShinyHunters, Midnight Blizzard, and GTG-10007 misused Claude to automate credential theft, malware operations, and espionage against dozens of victims.
78
Claude Used to Automate Exploitation and Data Theft Across Multiple Victims
Anthropic's 154-page report details Generative Threat Groups, including APT29-linked GTG-20006 and ShinyHunters affiliates, using Claude for reconnaissance, exploitation, and data theft.
78
Hackers Abuse Claude AI Agents to Automate Cyberattacks, Exploitation and Data Theft
Anthropic reports actors including GTG-20006 (Midnight Blizzard-linked) and ShinyHunters clusters abused Claude AI agents to automate phishing, credential harvesting, and data theft against 20+ organizations.
78
Appears with
- Claudeai model · 3
- GitHubvendor · 3
- Midnight Blizzardthreat actor · 3
- Anthropicorganization · 3
- Anthropicvendor · 3
- Claudeproduct · 3
- ShinyHuntersthreat actor · 3
- Giteeproduct · 2
- Kingfisherproduct · 2
- Snykvendor · 2
- Truffle Securityorganization · 2
- 1Passwordvendor · 2
- GitHuborganization · 2
- Nightfall AIvendor · 2
- Snykproduct · 2
- Check Pointvendor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.