Attackers are increasingly targeting developer endpoints to steal credentials, as demonstrated by supply chain attacks like Megalodon, TrapDoor, and Miasma. GitGuardian's new Developer Endpoint Protec…
Leakproof, a local-first secret-egress firewall for AI coding assistants like Claude Code and Cursor, launched on Hacker News. The tool intercepts outbound requests to redact or block secrets before t…
This article explains the security risks of accidentally committing API keys and secrets to Git repositories, noting that over 10 million secrets were detected in public commits in 2023. It provides a…
Supply chain attacks on npm and GitHub Actions are exploiting the gap between malicious package publication and CVE issuance, with attackers publishing compromised versions that are installed by thous…
A security researcher discovered that the U.S. Cybersecurity & Infrastructure Agency (CISA) had exposed a large cache of plaintext passwords, SSH private keys, and other sensitive credentials in a pub…
A contractor for the Cybersecurity & Infrastructure Security Agency (CISA) publicly exposed highly sensitive credentials on a GitHub repository, including keys to AWS GovCloud accounts and plaintext p…