Breach explained
Binance, BitGet, and the Credential Playbook That Keeps Working
The initial access vector changes, but the path stays the same: stolen credentials. Lessons from Binance and other recent crypto compromises.
MOST POPULAR
all tags
other
Binance, BitGet, and the Credential Playbook That Keeps Working
The initial access vector changes, but the path stays the same: stolen credentials. Lessons from Binance and other recent crypto compromises.
Inside the LiteLLM hack: 153GB, 433,909 Files, 2,488 Organizations
Attackers dumped everything they harvested from LiteLLM builds during a 40-minute window in March. Here is what is inside and what it says about where secrets live.
What Is a High-Impact Leak? How to Rank Compromised Credentials by Real Risk
Validation-only triage misses 46% of critical secrets because they can’t be verified automatically. Here’s how to rank compromised credentials by what they can actually reach, and which leaks need containing the same day.
The Binance Hack Raises a Critical Question: What Can a Compromised Laptop Reach?
A compromised laptop may have started the Binance hack. What can an attacker reach from a developer’s machine?
Your Leaked Secrets Now Show Up in Wiz
GitGuardian now sends leaked secrets from GitHub, GitLab, Bitbucket, and Azure DevOps to Wiz once a day, with validity, severity, and a link back to the incident. Your cloud and AppSec teams see the same leaked key, and the secret value never leaves GitGuardian.
How GitGuardian Secures the Credential Layer: From Discovery to Remediation
Credential layer security is more than detection. Follow one credential through the GitGuardian platform, from discovery across repos, CI/CD, laptops, and vaults to owner and access context, safe remediation, and prevention.
GitHub Octoverse 2026: AI Agents, Citizen Developers, and the New Security Reality
GitHub’s Octoverse 2026 counted 34.3 billion commits, and over 40% of pull requests now start with an AI agent. Read to learn what the State of the Octoverse 2026 Report reveals about AI, citizen developers, and our new security reality.
Rotating 1,000 Service Account Passwords With Zero Outages: Why the Inventory Comes First
Rotating 1,000+ service credentials across 150+ applications with zero outages took one lesson: rotation is the last step. Here’s the six-stage SCALER method, from inventory to rotation, and why a revert path made it safer.
GhostAction Crosses Paths With PolinRider: Inside the October Escalation
GhostAction pushed 72,026 commits to 22,964 repos in nine days, now targeting CI runners and developer machines with a launcher copied from PolinRider.
OWASP Top 10 Kubernetes Security Risks Explained: Why Credentials Deserve a Closer Look
GitGuardian researchers reached 44 active Kubernetes clusters through leaked secrets, and 30% had been exposed for more than two years. Here’s how the OWASP Kubernetes Top 10 explains these Kubernetes security risks, and why K03, Secrets Management Failures, turns one leak into a chain.
Responding to php2shell PHP Vulnerability When You Don’t Know What Secrets Are Deployed
On Oct. 21, 2026, PHP fixed a vulnerability named php2shell by Calif. Pre-auth RCE under default configurations, confirmed on common CMS, webmail, e-commerce, file sharing, and database administration applications. A PHP server also stores and uses credentials, so this is a secret theft vector.
Railway October 2026 Incident: Treat Every Environment Variable as Exposed
Railway's security incident may have exposed decrypted customer environment variables. Pull and scan yours with GitGuardian to know what to rotate first.
