NewsBleepingComputer05.11.2026SME Finance Public sector

Nearly 1.5 million exposed secrets targeted in new revocation program

Teaser from the source

Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that remain valid. [...]

This is the RSS-feed teaser. Read the full article at the original source.

Read at BleepingComputer

Other advisories

MediumCVE-2026-109462Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally.
Not ratedosv:CVE-2026-123813pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session
Not ratedosv:CVE-2026-113508Apache Airflow: Logout token revocation fails open; errors silently swallowed
Not ratedCVE-2026-113508Apache Airflow's logout endpoint attempted to revoke the presented token on the server, but any failure during revocation was silently ignored and logout sti…
Not ratedosv:CLEANSTART-2024-WW44913When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet revoked, and the existing key was kept ...
Not ratedosv:GHSA-5xjx-3w67-w9x9pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI
Criticalghsa:GHSA-5xjx-3w67-w9x9pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI
Not ratedosv:CLEANSTART-2026-DA71131Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

Other news entries

Source: https://www.bleepingcomputer.com/news/security/truffle-security-launches-program-to-revoke-14-million-live-secrets/

More on revocation

Other advisories

Other news entries