Over 543,000 valid credentials exposed in public GitHub repositories
Teaser from the source
More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform's security measures to prevent accidental leaks of sensitive data. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on GitHub
Other advisories
- Not ratedosv:CLEANSTART-2026-NH89673package github
- Not ratedosv:CLEANSTART-2026-KK78460flaw was found in github
- Not ratedosv:CLEANSTART-2026-SY25766Memory-safety vulnerability in github
- Not ratedosv:CLEANSTART-2026-JP29765Memory-safety vulnerability in github
- Not ratedosv:CLEANSTART-2026-XG38692denial-of-service vulnerability exists in github
- Not ratedosv:CLEANSTART-2026-OP23814Versions of the package github
- Not ratedosv:CVE-2026-119290Zuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing them to anyone who can view the workflow run
- Not ratedosv:CVE-2026-119289Zuke: githubWorkflow adopts any workflow run whose title matches its marker, so anyone who can dispatch the workflow can satisfy or block a release gate
Other news entries
- Hugging Face malware campaign returns to hijack GPUs for crypto miningNewsBleepingComputer
- Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto MinersNewsThe Hacker News
- Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hourNewsThe Register — Security
- Gut getarnt: Automatisch startender Wurm bei GitHub ist schwer zu findenNewsheise Security
- GitHub Launches npm Firewall to Block Malicious Packages Before InstallationNewsThe Hacker News
- GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHubNewsDark Reading
- Gheist turns GitHub Actions into a secret extraction serviceNewsCSO Online
- Attackers compromised 42 GitHub repositories by using files too large to be searchedNewsCSO Online
ID