[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmzMMEpzluDpjpfzeN8KktP4r5aWb0QcncHwSLvxgGAI":3},{"article":4,"iocs":55,"watch_terms":60,"solutions":61,"lesson":145},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"f16c0493-953d-44d9-91e4-4f2302983a18","Developer laptops are the credential store attackers are picking through in 2026, GitGuardian announces Endpoint Protection","developer-laptops-are-the-credential-store-attackers-are-picking-through-in-2026-0b2106","New York, New York, 16th June 2026, CyberNewswire","Attackers are increasingly targeting developer laptops for credentials, bypassing traditional security measures. GitGuardian's new Developer Endpoint Protection aims to address this by extending secrets and non-human identity (NHI) security to developer workstations, treating them as critical credential stores.","GitGuardian launches Developer Endpoint Protection to combat credential theft from developer workstations.","https:\u002F\u002Fhackread.com\u002Fdeveloper-laptops-are-the-credential-store-attackers-are-picking-through-in-2026-gitguardian-announces-endpoint-protection\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F06\u002Fendpointprotection_gitguardian_1781249010XdHjg5F7Ei.jpg","2026-06-16T12:00:30+00:00","2026-06-16T14:00:05.273202+00:00",8,[17,20,23,26,28,30],{"name":18,"type":19},"GitGuardian","vendor",{"name":21,"type":22},"Developer Endpoint Protection","product",{"name":24,"type":25},"non-human identity (NHI)","technology",{"name":27,"type":25},"coding agents",{"name":29,"type":25},"MCP servers",{"name":31,"type":22},"Bitwarden CLI","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":32,"icon":34,"name":35,"slug":36},null,"Threat Intelligence","threat-intelligence",[38,43,48,53],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":49},{"id":50,"icon":34,"name":51,"slug":52},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":54},{"id":32,"icon":34,"name":35,"slug":36},[56],{"type":57,"value":58,"context":59},"malware","Mini Shai-Hulud","Self-replicating worm compromising npm and PyPI packages.",[18,21,31],{"controls":62,"vendors":141},[63,91,112],{"slug":64,"name":65,"problem":66,"products":67},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[68,75,83],{"vendor_slug":69,"vendor_name":18,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"gitguardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"slug":92,"name":93,"problem":94,"products":95},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[96,104],{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":113,"name":114,"problem":115,"products":116},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[117,125,133],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",[142],{"slug":69,"name":18,"logo_path":70,"roles":143},[144],"reported_by",{"slug":146,"title":147,"body":148,"framework_refs":149,"framework_notes":163},"developer-laptops-are-now-prime-targets-for-credential-theft","Developer Laptops Are Now Prime Targets for Credential Theft","Attackers have shifted focus to developer workstations because these machines are densely packed with high-value secrets — API keys, tokens, SSH credentials, and cloud access credentials — that are often stored insecurely in plaintext files, shell histories, or IDE configurations. Traditional perimeter and server-side security controls largely overlook endpoints, creating a critical blind spot. Because developers typically hold privileged access to source code, cloud infrastructure, and CI\u002FCD pipelines, a single compromised laptop can cascade into a full organizational breach. This trend underscores that non-human identities (NHIs) and secrets must be governed at the point of origin — the developer's machine — not just in repositories or vaults.",[150,151,152,153,154,155,156,157,158,159,160,161,162],"CIS Control 3: Data Protection","CIS Control 5: Account Management","CIS Control 6: Access Control Management","CIS Control 10: Malware Defenses","CIS Control 18: Penetration Testing","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 IA-5: Authenticator Management","NIST SP 800-53 SC-28: Protection of Information at Rest","NIST SP 800-53 SI-3: Malicious Code Protection","NIST CSF DE.CM-7: Monitoring for Unauthorized Activity","GDPR Article 32: Security of Processing","ITIL: Security Management — Access and Credential Controls",{}]