Nearly 1.5 million exposed secrets targeted in new revocation program
Teaser from the source
Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that remain valid. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on revocation
Other advisories
- Not ratedosv:CLEANSTART-2024-WW44913When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet revoked, and the existing key was kept ...
- Criticalghsa:GHSA-5xjx-3w67-w9x9pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI
- Not ratedosv:GHSA-5xjx-3w67-w9x9pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI
- Not ratedosv:CLEANSTART-2026-DA71131Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation
- Not ratedosv:CLEANSTART-2026-IN28116Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation
- Not ratedosv:CVE-2026-119577ArcadeDB before 26.10.2 Improper Session Revocation in Wire-Protocol Connections
- Not ratedosv:CLEANSTART-2026-VJ21059Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation
- MediumCVE-2026-115356OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Kubernetes Auth Method Token Renewal After Revocation
Other news entries
- 26,400 live cloud and AI keys found in public Gitee repositories, led by Alibaba Cloud, DeepSeek and OpenAIBreachpwn.watch
- GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session DecryptionNewsThe Hacker News
- BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing RevocationsNewsThe Hacker News
- MFA Won't Save You From OAuth Consent AbuseNewsDark Reading
ID