Railway Breach Puts Developer Secrets at Risk
Keys to the Cloud, Possibly in Stranger Hands Access keys to cloud services may have fallen into the wrong hands. The cause is a compromise of a platform where developers trusted their secrets to...
Tagged: API Keys
Intruder Finds 28,000 Exposed .git Directories Leaking Live API Keys
A common web server misconfiguration has left tens of thousands of Git repositories publicly accessible, exposing keys to cloud services, payment systems, and other critical resources along with them. Researchers at Intruder scanned 3.5...
Gravity SMTP Vulnerability Exploited to Steal WordPress API Keys
Sometimes a leak starts not with a hacked admin panel, but with an open service request. Attackers are using exactly that method against WordPress sites that run the Gravity SMTP plugin. The vulnerability, tracked...
The AI Weak Link: How a Third-Party Breach Exposed Vercel Customer Secrets
The month of April concluded for the American firm Vercel with a distressing incident that precipitously transcended the boundaries of a mere internal complication. Adversaries secured unauthorized ingress into a segment of the company’s...
The AI Accelerator: How 29 Million Leaked Secrets are Fueling a New Era of Digital Insecurity
The ubiquitous integration of artificial intelligence into software development over the past year has precipitously accelerated production cycles while concurrently exacerbating deeply entrenched security vulnerabilities. The nascent State of Secrets Sprawl 2026 dossier published...
