Find, verify, and analyze leaked credentials. Contribute to trufflesecurity/trufflehog development by creating an account on GitHub.

Find, verify, and analyze leaked credentials. Contribute to trufflesecurity/trufflehog development by creating an account on GitHub.

Find, verify, and analyze leaked credentials. Contribute to trufflesecurity/trufflehog development by creating an account on GitHub.

Find and verify credentials. Contribute to trufflesecurity/trufflehog development by creating an account on GitHub.

Scan for secrets in dangling commits on GitHub using GH Archive data. - trufflesecurity/force-push-scanner

Find, verify, and analyze leaked credentials. Contribute to trufflesecurity/trufflehog development by creating an account on GitHub.

Phishing training is awful #appsec #phishing #security #cybersecurity

Find, verify, and analyze leaked credentials

Find secrets with Gitleaks 🔑. Contribute to gitleaks/gitleaks development by creating an account on GitHub.

At a glance Factor Details Organization Multiple enterprises, AI developers, and cloud users globally Data Exposed 64,024 live AWS access key pairs and root credentials Accounts Affected Over 9,900 distinct AWS accounts, including 768 corporate environments Cause Public repository commits, AI training datasets, container images, and CI logs Disclosure Status Direct notification to identifiable account owners and coordinated disclosure Source…

Truffle Security finds 9,300 leaked AWS access keys still active after years, with 768 giving full administrative control over corporate cloud accounts

Researchers found 768 still-active AWS access keys with root or admin privileges exposed in public code repositories and AI training datasets.

More than 9,300 AWS access keys exposed over a four-year period are still active, with hundreds tied to companies, root accounts, and AdministratorAccess users. Truffle Security warns that some of these leaked credentials could give attackers full control of AWS environments, including data theft, account takeover, and cryptomining, with Hugging Face being the largest source of exposed keys. #AWS #HuggingFace #TruffleSecurity

SecretParts rename

Check out trufflesecurity/trufflehog on GitHub

A weakness in Google's OAuth "Sign in with Google" feature could enable attackers that register domains of defunct startups to access sensitive data of former employee accounts linked to various softw...

Find, verify, and analyze leaked credentials. Contribute to trufflesecurity/trufflehog development by creating an account on GitHub.