#SecretScanning
LightNews LightNews
beefedai.bsky.social
Secrets Discovery & Classification at Enterprise Scale

https://beefed.ai/en/secrets-discovery-classification-enterprise

#SecretsDiscovery #SecretScanning #SecretDetection #SecretClassification #CodeScanning
Secrets Discovery & Classification at Enterprise Scale
beefed.ai
November 4, 2026 at 4:03 AM
connectabhiram.bsky.social
24,000 Secrets Sitting in MCP Config Files: Why AI Agents Need JIT, Not Better Key Vaulting?

Link: www.cloudanix.com/blog/24000-s...

#codesecurity #secretscanning #appsec #identitysecurity #cnapp #mcp #misconfigurations #cspm #cloudanix
Secrets Leaking in MCP Configs: Fix AI Agent Credentials With JIT
GitGuardian found 24,008 secrets in public MCP config files, thousands of them live. Here is why hardcoded agent credentials keep leaking and how JIT fixes it.
www.cloudanix.com
October 21, 2026 at 6:15 AM
yogsec.bsky.social
SecretSifter is an OWASP incubator project that detects credentials exposed in browser-delivered content, not source code.

GitHub: github.com/OWASP/Secret...

#OWASP #SecretScanning #AppSec #Cybersecurity #OpenSource
GitHub - OWASP/SecretSifter: OWASP Incubator project: detects credentials exposed in browser-delivered content (JavaScript, config responses, live traffic).
OWASP Incubator project: detects credentials exposed in browser-delivered content (JavaScript, config responses, live traffic). - OWASP/SecretSifter
github.com
October 20, 2026 at 1:13 AM
hightalk-me.bsky.social
GitHub’s 13 October 2026 announcement says push protection blocks new Anthropic secret types by default. HighTalk’s view: check which credentials a safeguard covers before relying on it in your workflow. This does not mean every credential is detectable. #SecretScanning #AI
October 15, 2026 at 6:25 AM
hacks.gr
Socket says more than 500 GitHub accounts added a malicious file across tens of thousands of repositories.

It searches project history too, incl…

https://en.hacks.gr/kampania-sto-github-kryvei-archeia-poy-klevoyn-stoicheia-prosvasis-apo-dekades-chiliades-erga/

#GitHub #GhostAction #SecretScanning
Καμπάνια στο GitHub κρύβει αρχεία που κλέβουν στοιχεία πρόσβασης από δεκάδες χιλιάδες έργα
October 9, 2026 at 9:03 PM
thedailytechfeed.com
GitHub’s ModernBERT flags hidden passwords pre-push—real-time secret protection goes live in October. #Security #GitHub #AI #SecretScanning #DevSecOps #ModernBERT https://thedailytechfeed.com/githubs-new-ai-flags-hidden-passwords-before-code-push/
October 8, 2026 at 2:08 PM
hacks.gr
GitHub’s new AI tool checks code changes for hidden passwords before submission.

The company says it stops about 30% of the credentials it scans before t…

https://en.hacks.gr/to-github-anakoinonei-ergaleio-poy-entopizei-krymmenoys-kodikoys-prin-dimosieytoyn-oi-allages/

#GitHub #SecretScanning #AI
Το GitHub ανακοινώνει εργαλείο που εντοπίζει κρυμμένους κωδικούς πριν δημοσιευτούν οι αλλαγές
October 8, 2026 at 3:25 PM
zachzang.bsky.social
Push protection stops the secret before it exists in history

Secret scanning alerts after the fact; push protection rejects the push outright.

#GH100 #GitHub #DevSecOps #SecretScanning

Full GH-100 explanation, free: https://navyduck.com/github/gh-100/q045-what-is-githubs-push-protection-feature
NavyDuck infographic: Push protection stops the secret before it exists in history
October 2, 2026 at 5:00 PM
tarnkappe.bsky.social
📬 GitHub-Leak: 543.699 Zugangsdaten sind noch immer gültig

#ITSicherheit #Studie #APISchlüssel #Cybersecurity #Datenleck #github #GitHubLeak #PushProtection #Quellcode #Repositories #SecretScanning #Zugangsdaten
GitHub-Leak: 543.699 Zugangsdaten sind noch immer gültig
GitHub-Leak mit 543.699 gültigen Zugangsdaten: Untersuchung zeigt, wie lange geleakte Credentials öffentlich bleiben und weiter funktionieren Der Artikel <a href="https://tarnkappe.info/artikel/it-sicherheit/github-leak-543699-zugangsdaten-334237.html">GitHub-Leak: 543.699 Zugangsdaten sind noch immer gültig</a> erschien zuerst auf <a href="https://tarnkappe.info">TARNKAPPE.INFO</a>
sc.tarnkappe.info
October 1, 2026 at 1:37 PM
securityonline.bsky.social
GitGuardian discovered 474 leaked GitHub App private keys still active. Learn how exposed GitHub App private keys threaten organizations like the CDC.

#GitHubSecurity #SecretScanning #DataExposure #GitGuardian #CyberSecurity
Leaked GitHub App Private Keys Expose Critical Infrastructure
At a Glance Attribute Details Organization Multiple entities (including the US CDC, BuildBuddy, and Civica) Data Exposed GitHub App RSA private keys, repository access, administrative permissions Number Affected 474 valid keys across 440 distinct Apps; hundreds of organizations exposed Cause Cryptographic private keys committed into public and third-party repositories Disclosure Status
securityonline.info
September 23, 2026 at 12:23 PM
thedailytechfeed.com
AWS cuts credential leaks to seconds: exposed IAM keys now auto-quarantined after GitHub leak. #AWS #CloudSecurity #IAM #SecretScanning #GitHub #BreachResponse https://thedailytechfeed.com/aws-can-quarantine-leaked-iam-keys-in-10-seconds-after-github-exposure/
September 21, 2026 at 4:42 PM
philip-jameson.bsky.social
Hidden Cost of Secret Scanning - Saas Comparison Saves $30k

https://pivotflow.site/hidden-cost-secret-scanning-saas-comparison-saves/?utm_source=bluesky&utm_medium=social
#secretscanning #cicdpipelinesecurity #startupcicdcosts
August 26, 2026 at 4:18 AM
kindtech.bsky.social
Pre-commit hooks catch secrets before they become incidents. Gitleaks plus a CI gate blocked on every commit stopped two credential leaks in our team this quarter. The cheapest fix is the one that runs before the secret leaves the machine. #SecretScanning #DevSecOps #Security
August 20, 2026 at 10:20 AM
beefedai.bsky.social
High-Fidelity Secret Scanning: Regex, Entropy, and Static Analysis

https://beefed.ai/en/high-fidelity-secret-scanning-techniques

#SecretScanning #RegexSecretsDetection #EntropyAnalysis #StaticAnalysis #FalsePositiveReduction
High-Fidelity Secret Scanning: Regex, Entropy, and Static Analysis
beefed.ai
May 15, 2026 at 3:11 AM
hasamba72.bsky.social
Vaultify scans endpoints for 350+ exposed API key patterns. Open-source Go binary with AI agent Vee triaging findings—vault to 1Password/AWS/HashiCorp or redact on disk. Zero telemetry, fully offline. MIT license. #tool #secretscanning https://bit.ly/3PK2GEX
May 25, 2026 at 1:55 PM