500,000 Active Credentials Left Exposed on GitHub
Teaser from the source
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default. The post 500,000 Active Credentials Left Exposed on GitHub appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on GitHub
Other advisories
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-77524CVE-2026-77524 in github.com/kedacore/keda/v2 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-95837CVE-2026-95837 in github.com/containerd/containerd/v2 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-63209CVE-2026-63209 in github.com/klauspost/compress - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-1229CVE-2026-1229 in github.com/cloudflare/circl - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2025-8556CVE-2025-8556 in github.com/cloudflare/circl - Patched by Root
- Not ratedosv:openSUSE-SU-2026:12284-1github-mcp-server-2.0.3-1.1 on GA media
- Not ratedosv:openSUSE-SU-2026:12285-1golang-github-prometheus-prometheus-3.15.0-2.1 on GA media
- MediumCVE-2026-116369Sunwood-ai-labs Github-kanban-mcp-server: Betriebssystem-Befehlsinjektion
Other news entries
- GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHubNewsDark Reading
- Gheist turns GitHub Actions into a secret extraction serviceNewsCSO Online
- Attackers compromised 42 GitHub repositories by using files too large to be searchedNewsCSO Online
- Worm armed 42 GitHub repos by hiding a payload too big to failNewsThe Register — Security
- 'Gheist' Weaponizes GitHub Tokens to Steal Cloud SecretsNewsDark Reading
- Mythos 5 Ignored Real-World Harm in July AttackNewsSecurityWeek
- Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions LogsNewsThe Hacker News
- Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release PipelineNewsThe Hacker News
Source: https://www.securityweek.com/500000-active-credentials-left-exposed-on-github/
ID