26,400 live cloud and AI keys found in public Gitee repositories, led by Alibaba Cloud, DeepSeek and OpenAI
Teaser from the source
A researcher scanned 7.25 million public repositories on Gitee, China's largest Git host, and found 26,400 unique credentials that still worked: 9,473 Alibaba Cloud AccessKey pairs, 3,805 YouTube API keys, 3,170 DeepSeek keys, 1,489 Zhipu BigModel keys, 1,348 OpenAI keys and more, including an organization-admin key for an unnamed enterprise AI platform. Gitee has no public secret-scanning partnerships with vendors, and no revocations were confirmed at publication. Anyone who ever pushed a key to a public Gitee repo should treat it as exposed and revoke it.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on DeepSeek
Other advisories
- MediumCVE-2026-120204Deepseek-ai DeepInfer: Pfadüberschreitung (Path Traversal)
- MediumCVE-2026-120204Deepseek-ai DeepInfer: Pfadüberschreitung (Path Traversal)
- MediumCVE-2026-115914vLLM DeepSeek-OCR image processing vulnerable to denial of service
- MediumCVE-2026-115914vLLM DeepSeek-OCR image processing vulnerable to denial of service
- Not ratedosv:CVE-2026-115914vLLM DeepSeek-OCR image processing vulnerable to denial of service
- HighCVE-2026-116368DeepSeek Harness: fehlerhafte Rechtevergabe
- MediumCVE-2026-116367DeepSeek Harness: Sicherheitslücke
- HighCVE-2026-116368DeepSeek Harness: fehlerhafte Rechtevergabe
Other news entries
- China Defends DeepSeek After US Ban of Its AI From Government SystemsNewsSecurityWeek
- U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New PurchasesNewsThe Hacker News
- US bans DeepSeek across federal agencies, putting AI supply chains under scrutinyNewsCSO Online
- DHS bans DeepSeek products across US federal civilian agenciesNewsBleepingComputer
- DeepSeek deep-sixed at all US federal civilian agenciesNewsThe Register — Security
- New ClosedQuorum Windows malware uses AI for attack decisionsNewsBleepingComputer
- Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation AttacksNewsThe Hacker News
- DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without ApprovalNewsThe Hacker News
Source: https://pwn.watch/i/gitee-26400-live-credentials-public-repos-oct-2026
ID