<![CDATA[Over 543,000 valid credentials exposed in public GitHub repositories]]>A recent analysis has found that more than 543,000 credentials exposed in public GitHub repositories were still valid as of July, despite the platform's efforts to prevent accidental leaks of sensitive data.

According to the report, these credentials remained active even after being publicly accessible, highlighting ongoing challenges in securing secrets in code repositories. The exposure of valid credentials poses significant risks, including unauthorized access to systems, data breaches, and potential lateral movement within organizations.

Key points from the findings:

  • Over 543,000 valid credentials were identified in public repositories.
  • The credentials were still active in July, indicating they had not been revoked or rotated.
  • This occurs despite GitHub's security measures aimed at detecting and preventing accidental leaks.

Organizations and developers are urged to review their repositories for exposed secrets, rotate any compromised credentials immediately, and implement practices such as secret scanning and pre-commit hooks to prevent future leaks.

Source: Unknown

Has your organization audited its public repositories for exposed credentials, and what steps are you taking to prevent similar leaks?

]]>https://xploitlk.com/topic/520/over-543-000-valid-credentials-exposed-in-public-github-repositoriesRSS for NodeTue, 27 Oct 2026 08:20:22 GMTWed, 30 Sep 2026 18:30:22 GMT60