Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Hi, what are you looking for?
SecurityWeek
All posts tagged "secrets sprawl"
Cybersecurity Funding
The secrets security company has raised more than $100 million since its creation in 2017.
Data Protection
JSONFormatter and CodeBeautify users exposed credentials, authentication keys, configuration information, private keys, and other secrets.
Artificial Intelligence
Wiz found the secrets and warned that they can expose training data, organizational structures, and private models.
Cybersecurity Funding
The investment will fuel the development of Truffle’s enterprise-grade secrets detection, verification, and remediation platform.
Application Security
A supply chain attack called GhostAction has enabled threat actors to steal secrets and exploit them.
Supply Chain Security
The private repositories of hundreds of organizations were published publicly in the second phase of the Nx supply chain attack.
Data Protection
CyberArk has patched several vulnerabilities that could be chained for unauthenticated remote code execution.
Data Protection
A security researcher has discovered hundreds of leaked secrets by restoring files deleted from GitHub repositories.
Data Protection
GitHub has announced new capabilities to help organizations and developers keep secrets in their code protected.
Funding/M&A
Infisical banks $2.8 million in seed funding as investors continue to bet on companies in the software supply chain security space.
Data Protection
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.
Data Breaches
CISO Conversations
Email Security
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow...
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Vulnerabilities
