The Credential Layer Is Expanding Faster Than Security Teams Can See It
GitGuardian says secrets sprawl is outpacing visibility as commits, agents, and leaked AI credentials multiply.
GitGuardian argues that growing commits, integrations, and coding agents are expanding the enterprise credential layer faster than security teams can see it. The company cites 28.65 million new hardcoded secrets in public GitHub commits in 2025, up 34 percent, and an 81 percent rise in leaked AI-service credentials. Its State of Secrets Sprawl 2026 research found internal repositories about six times more likely than public ones to contain a secret, with about 28 percent of incidents originating outside source code. The essay also cites the 2026 Verizon DBIR, which attributed 22 percent of initial access to compromised credentials, and points to Shai-Hulud and S1ingularity infostealer activity against developer laptops.
- GitGuardian found 28.65 million new public GitHub secrets in 2025.
- Leaked credentials tied to AI services rose 81 percent.
- Internal repositories were about six times likelier to contain secrets.
- About 28 percent of secrets incidents began outside source code.
- Verizon DBIR 2026 linked 22 percent of initial access to stolen credentials.
- Vendors
- GitGuardianGitHub
- Products
- GitHub
- Malware
- Shai-HuludS1ingularity
- Organizations
- GitGuardianGitHubVerizon
From the original article
9 min read at thehackernews.com
Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each other securely. GitGuardian helps secure that credential layer through three connected capabilities: Detect, Remediate, and Prevent.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.