Coding agents leave thousands of real secrets in public GitHub repositories
RESEARCHApiiroredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Researchers at Apiiro found more than 2,500 real passwords and access keys in nearly 2,000 public GitHub projects. Some belonged to databases and cloud services, including a medical-records database, and the exposure affected 63 organisations that the article mentions.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Rotate any credentials that may have been committed to public GitHub repositories.
- Scan your repositories for hardcoded or copied secrets, including files created by coding agents.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
DataBreaches.net
Who and what is in it
Companies