GitHub Actions re-enabled with Mini Shai-Hulud payload still active
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks
A Data-Driven Analysis of Infostealer Malware Victims
Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore
8 min
Researchers uncover malware that uses AI to choose its next move
Hundreds of Leaked GitHub App Keys Still Authenticate
2 sources 2 min
USN-8806-1: NetworkManager vulnerability
From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies
3 sources 15 min
Google confirms Gemini models hacked three companies in May 2026
Most Fraudulent Hires Receive Credentials Before Detection
2 min
Postman Passport controls API access without exposing credentials
2 min
Schneider Electric SCADAPack x70 Products
7 min
Mass Scanning Targets Exposed Vite Servers to Steal AWS Keys and Azure Tokens
in the wild 2 min
Your passkeys can now move between password managers on Android
35 Actionable Password Statistics for Businesses in 2026 | Huntress
10 min
Product showcase: GitGuardian Honeytoken catches credential theft as it happens
7 min1
Electronic health record company says customer data stolen in breach
in the wild 3 min
A five-part inventory for your AI agent credentials
Researchers Uncover Thousands of Leaked AWS Keys
Unit 42 Deep and Dark Web Service Archives
Credential Risk Report
Infostealers Harvest 1.7 Billion Credentials in Six Months
in the wild