[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8GDDPIP6kgYhl_LVDLS3_raFJOCvLBpK7AlMmHsa1F8":3},{"article":4,"iocs":42,"watch_terms":43,"solutions":44,"lesson":132},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"df8ac4e7-0819-468c-81ea-39659f372564","Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore","secrets-sprawl-is-an-identity-problem-that-ai-just-made-impossible-to-ignore-eeeda4","AI coding agents are changing how quickly developers can build and ship software as well as how quickly credentials can become exposed. According to GitGuardian’s 2026 State of Secrets Sprawl Report, commits identified as AI-assisted are leaking secrets at approximately twice the rate of human-written ones. Most of the fastest-growing categories of leaked credentials are now connected to AI","A new report indicates that AI coding agents are contributing to a significant increase in secrets sprawl, leaking credentials at approximately twice the rate of human-written code. This acceleration is due to AI agents' ability to access and spread sensitive information across more systems than security teams can effectively track and rotate, highlighting a growing challenge in managing non-human identities.","AI coding agents are leaking secrets at twice the rate of human-written code.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fsecrets-sprawl-is-identity-problem-that.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEi8mLbRmwaAgvJunom4dBxBYMz50LUutLJiS6Yz7RPCbZQO1aYXAqFWOga4dCKD3AoenZHxYLpPexLEQ2swJO67vy4xl2_uw1g08lRtETN3hTMLpvafmn5WD4VK2ilpuFaYAdMHHPBRG2yYsyDBins15huubgt2b6pDVnnhW92It8lKHBqOifOLTaNSwho\u002Fs1600\u002Fkeeper.png","2026-09-24T11:00:00+00:00","2026-09-24T14:00:21.16801+00:00",8,[17,20,23],{"name":18,"type":19},"AI coding agents","product",{"name":21,"type":22},"GitGuardian","vendor",{"name":24,"type":25},"Artificial Intelligence","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":28,"name":29,"slug":30},null,"Vulnerabilities","vulnerabilities",[32,37],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18],{"controls":45,"vendors":128},[46,75,103],{"slug":47,"name":48,"problem":49,"products":50},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[51,59,67],{"vendor_slug":52,"vendor_name":53,"vendor_logo":54,"product_slug":55,"product_name":56,"url":57,"description":58},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"slug":76,"name":77,"problem":78,"products":79},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[80,88,95],{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":89,"vendor_name":21,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"gitguardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"slug":36,"name":104,"problem":105,"products":106},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[107,115,123],{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":124,"product_name":125,"url":126,"description":127},"boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",[129],{"slug":89,"name":21,"logo_path":90,"roles":130},[131],"reported_by",{"slug":133,"title":134,"body":135,"framework_refs":136,"framework_notes":147},"ai-coding-agents-are-doubling-the-rate-of-secrets-sprawl","AI Coding Agents Are Doubling the Rate of Secrets Sprawl","AI coding agents are leaking credentials and secrets at approximately twice the rate of human developers, largely because they autonomously access and propagate sensitive information across multiple systems without adequate oversight. The core problem is that non-human identities — API keys, tokens, and credentials used by AI agents — are poorly tracked, rarely rotated, and often hardcoded into repositories or configuration files. As AI adoption accelerates, security teams are losing visibility into where secrets live and how they are being consumed. This represents a critical identity governance gap: organizations designed their secrets management practices around human developers, not autonomous AI systems operating at machine speed and scale.",[137,138,139,140,141,142,143,144,145,146],"CIS Control 4: Controlled Use of Administrative Privileges","CIS Control 5: Account Management","CIS Control 16: Application Software Security","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 IA-5: Authenticator Management","NIST SP 800-53 SI-12: Information Management and Retention","NIST SP 800-204D: Strategies for Securing AI\u002FML Pipelines","GDPR Article 32: Security of Processing","OWASP Top 10 A02:2021 – Cryptographic Failures","ITIL: Security Management \u002F Access Control Practices",{}]