[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjslfAHC5ZUEaq5N4ne2A_bl8g1iBKou3E4XU1ULMi00":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":137},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"ab419a54-a0fe-4424-83f2-5718a25b5433","500,000 Active Credentials Left Exposed on GitHub","500-000-active-credentials-left-exposed-on-github-471028","Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default. The post 500,000 Active Credentials Left Exposed on GitHub appeared first on SecurityWeek.","Truffle Security discovered over 543,000 active credentials in public GitHub repositories, with many pushed even after GitHub enabled default push protections. The credentials, including Google Cloud service account credentials and MongoDB connection strings, remain active due to a lack of mandatory revocation by providers.","Over 500,000 active credentials found exposed on public GitHub repositories.","https:\u002F\u002Fwww.securityweek.com\u002F500000-active-credentials-left-exposed-on-github\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F05\u002Fcredentials-stolen-login.jpg","2026-10-01T09:43:56+00:00","2026-10-01T10:00:09.541167+00:00",8,[17,20,23,25],{"name":18,"type":19},"GitHub","product",{"name":21,"type":22},"Truffle Security","vendor",{"name":24,"type":19},"Google Cloud",{"name":26,"type":19},"MongoDB","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":27,"icon":29,"name":30,"slug":31},null,"Breaches","breaches",[33,35,40,45],{"category":34},{"id":27,"icon":29,"name":30,"slug":31},{"category":36},{"id":37,"icon":29,"name":38,"slug":39},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":41},{"id":42,"icon":29,"name":43,"slug":44},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":46},{"id":47,"icon":29,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18,24],{"controls":53,"vendors":136},[54,82,110],{"slug":55,"name":56,"problem":57,"products":58},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":76,"vendor_name":18,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"github","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"slug":49,"name":83,"problem":84,"products":85},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[86,94,102],{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",{"slug":111,"name":112,"problem":113,"products":114},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[115,121,129],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":116,"product_name":117,"url":119,"description":120},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":111,"product_name":133,"url":134,"description":135},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",[],{"slug":138,"title":139,"body":140,"framework_refs":141,"framework_notes":152},"500000-active-credentials-exposed-in-public-github-repos","500,000 Active Credentials Exposed in Public GitHub Repos","Developers inadvertently pushed sensitive credentials — including Google Cloud service account keys and MongoDB connection strings — into public GitHub repositories, leaving them discoverable by anyone. Even after GitHub introduced default push protection controls, thousands of secrets continued to be exposed, suggesting developers bypassed or ignored the safeguards. The credentials remained active because neither developers nor service providers enforced mandatory revocation upon discovery. This matters because exposed credentials are a direct pathway for attackers to access cloud infrastructure, databases, and sensitive data at scale, often within minutes of a secret being posted publicly.",[142,143,144,145,146,147,148,149,150,151],"CIS Control 3.11 – Encrypt Sensitive Data at Rest","CIS Control 4.7 – Manage Default Accounts on Enterprise Assets","CIS Control 14 – Security Awareness and Skills Training","NIST SP 800-53 AC-2 – Account Management","NIST SP 800-53 IA-5 – Authenticator Management","NIST SP 800-53 SA-15 – Development Process, Standards, and Tools","NIST SP 800-57 – Key Management Guidelines","GDPR Article 32 – Security of Processing","OWASP Top 10 A02:2021 – Cryptographic Failures","ITIL – Information Security Management (Credential Lifecycle)",{}]