Over 543,000 valid credentials exposed in public GitHub repositories
Truffle Security found 543,699 still-valid credentials exposed in public GitHub repositories.
Stories per day · 30 days
2 RSS
3 stories, newest first · one card per story
Stories tagged #secrets-exposure
Hardcoded MCP credentials found in public GitHub files
Hush Security found 12% of 82,000 public GitHub MCP config files contained hardcoded API keys, bearer tokens, and database passwords.
BlackHatSect0r Hackers Disable AI Safety Controls to Automate Credential Theft and Cyberattacks
French-speaking crew BlackHatSect0r disabled AI agent safety controls to automate scanning, credential harvesting, and vishing, exposing 16,834 stolen credentials.
6