[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxDYu-hMGfxeBQ30WMHFOaw6L9lOqxFh7zYNT4tqHYwg":3},{"article":4,"iocs":42,"watch_terms":43,"solutions":44,"lesson":135},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"8f6ae122-961b-4374-b48c-1e668e4a514e","The Credential Layer Is Expanding Faster Than Security Teams Can See It","the-credential-layer-is-expanding-faster-than-security-teams-can-see-it-6c2138","Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each other securely. GitGuardian helps secure that credential layer through three connected capabilities: Detect, Remediate, and Prevent. The journey starts with detection, because organizations first need to understand what credentials exist, where they live, and what they","The article highlights the rapid expansion of the 'credential layer' in modern enterprises, driven by accelerated software production and the rise of AI agents. Security teams are struggling to keep pace with the sheer volume and distributed nature of credentials, which now span across code repositories, collaboration tools, and AI services. GitGuardian's research indicates a significant year-over-year increase in detected hardcoded secrets and leaked AI service credentials, underscoring the urgent need for better visibility and management of this expanding attack surface.","Credential exposure is expanding rapidly due to accelerated software production and AI agent adoption.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Fthe-credential-layer-is-expanding.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEhcMENqm_uSfWzk7VlgN5LXTaqUnYGOAelJ9aFsc6s57oUV43awGRScfhyphenhyphenaOYpv1eWkCfunH00lWMH6uUS9sUav8nBmwSHh9w_e3VL1F5AvjF9tpbUeFHCu6ohHZbqOqujA75PEZo_DbtWTv1NtQOKLwaIwJvGZw8rdFDEMcCm_0DvIOfeVPzW8ITMmVwg\u002Fs1600\u002Fgit.gif","2026-10-05T11:55:00+00:00","2026-10-05T14:00:21.337143+00:00",7,[17,20,23],{"name":18,"type":19},"GitHub","product",{"name":21,"type":22},"GitGuardian","vendor",{"name":24,"type":25},"AI agents","technology","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":26,"icon":28,"name":29,"slug":30},null,"Threat Intelligence","threat-intelligence",[32,37],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",[],[21,18],{"controls":45,"vendors":129},[46,74,102],{"slug":47,"name":48,"problem":49,"products":50},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[51,58,66],{"vendor_slug":52,"vendor_name":18,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"github","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"slug":75,"name":76,"problem":77,"products":78},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[79,86,94],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":81,"url":84,"description":85},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"slug":103,"name":104,"problem":105,"products":106},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[107,114,122],{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":108,"product_name":111,"url":112,"description":113},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":103,"product_name":126,"url":127,"description":128},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",[130],{"slug":131,"name":21,"logo_path":132,"roles":133},"gitguardian","\u002Fvendor-logos\u002Fgitguardian.png",[134],"reported_by",{"slug":136,"title":137,"body":138,"framework_refs":139,"framework_notes":149},"hardcoded-secrets-and-ai-credentials-outpacing-security-visibility","Hardcoded Secrets and AI Credentials Outpacing Security Visibility","Organizations are generating credentials at a pace that far exceeds their ability to track, rotate, or revoke them, creating a sprawling and largely invisible attack surface. Hardcoded secrets embedded in code repositories, collaboration platforms, and AI service integrations represent a critical failure in secure development practices and configuration discipline. When credentials are not inventoried or monitored, a single leaked API key or service token can grant attackers persistent, broad access to sensitive systems and data. The rise of AI agents further compounds this risk, as automated workflows generate non-human identities that are often provisioned with excessive permissions and no expiration. This matters because credential compromise consistently ranks as one of the most common initial access vectors in major breaches.",[140,141,142,143,144,145,146,147,148],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 5: Account Management","CIS Control 8: Audit Log Management","NIST SP 800-53 IA-5: Authenticator Management","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 CM-6: Configuration Settings","NIST SP 800-218 SSDF PW.8: Protect Software","GDPR Article 32: Security of Processing","OWASP Top 10 A02:2021 – Cryptographic Failures (secret exposure)",{}]