31,088 secrets in Claude Code’s .claude/settings.local.json on public GitHub, 5,343 valid at detection, 23,276 repositories. 613 more in Docker Hub images, 99 valid. Validity, timeline, Docker Hub, who is affected.
31,088 secrets in Claude Code’s .claude/settings.local.json on public GitHub, 5,343 valid at detection, 23,276 repositories. 613 more in Docker Hub images, 99 valid. Validity, timeline, Docker Hub, who is affected.
Microsoft Threat Intelligence caught attackers using an agentic AI framework, ARTEX, to hunt exposed secrets on public GitHub and move into Azure tenants in as little as five minutes. GitGuardian has tracked this attack path since 2017. Here is what changed, and four things to do today.
Kubernetes Secrets are base64 encoded, not encrypted, so a password in values.yaml is a working credential in Git. Compare four ways to keep secrets out of your Helm charts and find the one that fits what your team already runs.
The initial access vector changes, but the path stays the same: stolen credentials. Lessons from Binance and other recent crypto compromises.
Attackers dumped everything they harvested from LiteLLM builds during a 40-minute window in March. Here is what is inside and what it says about where secrets live.
Validation-only triage misses 46% of critical secrets because they can’t be verified automatically. Here’s how to rank compromised credentials by what they can actually reach, and which leaks need containing the same day.
A compromised laptop may have started the Binance hack. What can an attacker reach from a developer’s machine?
GitGuardian now sends leaked secrets from GitHub, GitLab, Bitbucket, and Azure DevOps to Wiz once a day, with validity, severity, and a link back to the incident. Your cloud and AppSec teams see the same leaked key, and the secret value never leaves GitGuardian.
Credential layer security is more than detection. Follow one credential through the GitGuardian platform, from discovery across repos, CI/CD, laptops, and vaults to owner and access context, safe remediation, and prevention.
GitHub’s Octoverse 2026 counted 34.3 billion commits, and over 40% of pull requests now start with an AI agent. Read to learn what the State of the Octoverse 2026 Report reveals about AI, citizen developers, and our new security reality.
Rotating 1,000+ service credentials across 150+ applications with zero outages took one lesson: rotation is the last step. Here’s the six-stage SCALER method, from inventory to rotation, and why a revert path made it safer.
GhostAction pushed 72,026 commits to 22,964 repos in nine days, now targeting CI runners and developer machines with a launcher copied from PolinRider.
GitGuardian is the code security platform for
the DevOps generation.
With automated secrets detection and
remediation, our platform enables Dev, Sec, and Ops to advance together
towards the Secure Software Development Lifecycle.
Subscribe to our newsletter to receive the latest content and updates from GitGuardian.
