Endpoint Protection
The Binance Hack Raises a Critical Question: What Can a Compromised Laptop Reach?
A compromised laptop may have started the Binance hack. What can an attacker reach from a developer’s machine?
MOST POPULAR
all tags
other
The Binance Hack Raises a Critical Question: What Can a Compromised Laptop Reach?
A compromised laptop may have started the Binance hack. What can an attacker reach from a developer’s machine?
Your Leaked Secrets Now Show Up in Wiz
GitGuardian now sends leaked secrets from GitHub, GitLab, Bitbucket, and Azure DevOps to Wiz once a day, with validity, severity, and a link back to the incident. Your cloud and AppSec teams see the same leaked key, and the secret value never leaves GitGuardian.
How GitGuardian Secures the Credential Layer: From Discovery to Remediation
Credential layer security is more than detection. Follow one credential through the GitGuardian platform, from discovery across repos, CI/CD, laptops, and vaults to owner and access context, safe remediation, and prevention.
GitHub Octoverse 2026: AI Agents, Citizen Developers, and the New Security Reality
GitHub’s Octoverse 2026 counted 34.3 billion commits, and over 40% of pull requests now start with an AI agent. Read to learn what the State of the Octoverse 2026 Report reveals about AI, citizen developers, and our new security reality.
Rotating 1,000 Service Account Passwords With Zero Outages: Why the Inventory Comes First
Rotating 1,000+ service credentials across 150+ applications with zero outages took one lesson: rotation is the last step. Here’s the six-stage SCALER method, from inventory to rotation, and why a revert path made it safer.
GhostAction Crosses Paths With PolinRider: Inside the October Escalation
GhostAction pushed 72,026 commits to 22,964 repos in nine days, now targeting CI runners and developer machines with a launcher copied from PolinRider.
OWASP Top 10 Kubernetes Security Risks Explained: Why Credentials Deserve a Closer Look
GitGuardian researchers reached 44 active Kubernetes clusters through leaked secrets, and 30% had been exposed for more than two years. Here’s how the OWASP Kubernetes Top 10 explains these Kubernetes security risks, and why K03, Secrets Management Failures, turns one leak into a chain.
Responding to php2shell PHP Vulnerability When You Don’t Know What Secrets Are Deployed
On Oct. 21, 2026, PHP fixed a vulnerability named php2shell by Calif. Pre-auth RCE under default configurations, confirmed on common CMS, webmail, e-commerce, file sharing, and database administration applications. A PHP server also stores and uses credentials, so this is a secret theft vector.
Railway October 2026 Incident: Treat Every Environment Variable as Exposed
Railway's security incident may have exposed decrypted customer environment variables. Pull and scan yours with GitGuardian to know what to rotate first.
What Is Credential Layer Security? The Layer Every Other Control Trusts
Developer laptops hold about 150 secrets each, and roughly 28% of secret incidents happen outside code repositories. Learn what credential layer security is and the six controls that protect every surface where credentials live
Leaked API Keys in LLMs: How AI Agents Expose Secrets
Researchers pulled real, leaked API keys out of three LLMs using only API output. Here is how AI agents carry secrets from developer laptops into model context, and how to stop them before the model sees them.
Why We Built the Good Samaritan Program
The first thing GitGuardian ever shipped was a free warning. Now we’re making sure it gets heard.
