Hacking Tips & Writeups. Explore bug bounty hunting guides, ethical hacking techniques, OSINT, Social Engineering, and cybersecurity tools. Free resources for beginners & pros. 🔗 Tools: cybersecurity...

TL;DR Security researchers discovered Claude Code leaking secrets across 1,994 public GitHub repositories. When developers select "Yes, and don't ask again" during a coding session, the tool writes the exact command and any embedded password into a local configuration file. Consequently, thousands of developers have accidentally committed these hidden allowlist files to public repositories. What was exposed Between November 1 and November 3, 2026, Apiiro researchers Shmulik Cohen and Matan Giladi scanned 104,185 public copies of the configuration file on GitHub.

TL;DR A recent DigiCert data exposure allowed an unauthorized party to view archived customer records on an internal platform. Specifically, an infrastructure migration accidentally exposed a self-registration feature during an internal business system breach. Fortunately, the intruder only had read-only access and could not issue or modify digital certificates. What was exposed On October 19, 2026, the certificate authority confirmed that an unauthorized account accessed a subset of its archived customer data.

Thousands of Johns Hopkins Bayview Medical Center patients had sensitive data exposed in a breach caused by an employee.

At a Glance Organization VIDAA OS and its ACR partner Unruly (exposure); Samsung Tizen and Vizio SmartCast (opt-out findings) Data exposed ACR detection results with device IDs, app names and content categories such as religion, politics and health Records affected 57 million detection results from more than one million TVs, counted by researchers in a three-hour sample Cause

The city of Vicksburg, Mississippi, has taken its computer systems offline after a ransomware attack disrupted several city functions. Mayor Willis Thompson confirmed the incident and announced a temporary shutdown while officials investigate the incident and restore the affected systems. Due to this incident, residents will be unable to use online utility payment services and will experience delays making payments in person due to the incident.  Even with the disruption, emergency response, police, fire, and utility services remain operational. In addition, residents of Vicksburg will not be subjected to late payments or termination of utility services while the systems remain offline, according to the city. As part of the recovery effort, Vicksburg has enlisted outside cybersecurity experts and is working with the FBI, Department of Homeland Security, and state officials.  As part of the investigation, officials are examining whether personal or confidential information belonging to customers, contractors, vendors, employees or business partners has been accessed. As of this writing, officials do not know whether any information has been accessed or taken without authorization. Also, it has not been disclosed who the attackers are or whether a ransom demand has been placed.  Although the investigation and system recovery are ongoing, technical details about the incident will remain withheld while questions remain regarding its exact nature and scope. Reporting has not been able to establish whether the incident involved the encryption of city systems typically associated with ransomware or whether the term was being used in connection with a ransom demand.  There was no publicly asserted responsibility at the time of reporting, and the city did not disclose whether a ransom was demanded, or whether any communication with the attackers occurred. In addition, officials have withheld technical information that could impact the ongoing investigation.  Investigations are aimed at investigating whether the incident exposed personal or confidential information of current and former customers, contractors, vendors, employees and affiliated business partners, as well as other parties involved.  If a compromise is confirmed, officials have informed affected individuals that appropriate information and resources will be provided. However, a final determination has not been reached regarding whether such information was accessed or acquired without authorization. The city is currently partnering with external cybersecurity specialists and other partners in order to secure the restoration of affected services, alongside the investigation. Some routine government operations, particularly utility payment processing, have already been affected by the shutdown, even though vital emergency and utility services have been provided.  There are approximately 10,000 utility accounts that are serviced by the city's water and gas office, which means that the disruption may affect a significant proportion of the local community. Other ransomware attacks have also been reported in Mississippi following the Vicksburg incident. As part of its recovery process, the University of Mississippi Medical Center consulted with the FBI following a ransomware incident that caused parts of its systems to be unavailable for several weeks.  In previous years, Mississippi saw ransomware affect an electric utility and a county government, highlighting that a number of public-sector and critical service organizations have experienced similar disruptions. However, Vicksburg is unsure whether the shutdown will last for a prolonged period of time.  Investigations are currently underway to determine how the intrusion occurred, which systems were affected, and whether any sensitive information has been compromised. Further details will be provided once verified findings have been identified.

At a Glance Attribute Details Organization Multiple entities (including the US CDC, BuildBuddy, and Civica) Data Exposed GitHub App RSA private keys, repository access, administrative permissions Number Affected 474 valid keys across 440 distinct Apps; hundreds of organizations exposed Cause Cryptographic private keys committed into public and third-party repositories Disclosure Status

At a glance Truffle Security researchers found a critical GnuTLS token leak on June 17, 2026. This exposure threatened the entire open-source supply chain. Organization: GnuTLS and OpenConnect projects Data exposed: Privileged GitLab personal access token Number of records: One API token with Owner access Cause: Environment variables dumped into public log files Disclosure status: Confirmed, patched, and token revoked…

A common web server misconfiguration has left tens of thousands of Git repositories publicly accessible, exposing keys to cloud services, payment systems, and other critical resources along with them. Researchers at Intruder scanned 3.5 million live websites and discovered approximately 28,000 exposed .git directories. Hundreds of Live Credentials Found Exposed The scan revealed that more than 400 AWS access keys, 107 Stripe secret keys, 123 OpenAI keys, 80 Telegram tokens, and 17 GitHub personal access tokens had all been left publicly accessible.

AI coding agents can expose API keys and credentials through prompts and context. Learn how secrets detection stops leaks before they reach a model.

Researchers found 768 still-active AWS access keys with root or admin privileges exposed in public code repositories and AI training datasets.