Over 543,000 valid credentials exposed in public GitHub repositories
Truffle Security found 543,699 still-valid credentials exposed in public GitHub repositories.
Truffle Security reported that 543,699 unique credentials exposed in public GitHub repositories were still valid as of July. Researchers scanned 224 million repositories and more than 58 billion files. The median time a unique credential remained public was 784 days, about 10 percent were older than 6.3 years, and the oldest dated to 2009. Those secrets recurred across more than 1.1 million files and repositories, including copies in forks.
- 543,699 unique GitHub credentials were still valid in July.
- Researchers scanned 224 million repositories and over 58 billion files.
- Median time a credential stayed public was 784 days.
- Roughly 10 percent of valid secrets were older than 6.3 years.
- Vendors
- GitHub
- Products
- GitHub
- Organizations
- Truffle SecurityGitHub
From the original article
1 min read at databreaches.netBill Toulas reports: More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform’s security measures to prevent accidental leaks of sensitive data. Data pulled from scanning 224 million repositories and more than 58 billion files show that the median time a unique credential remained publicly accessible was 784... Source
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.