> TritonInfoSec News
Home / Oct 01, 2026 / Story
0
#10 BleepingComputer general September 30, 2026 at 18:08 UTC

Over 543,000 valid credentials exposed in public GitHub repositories

By Bill Toulas

AI Summary

Over 543,000 credentials exposed in public GitHub repositories were confirmed still valid as of July 2026, despite GitHub's secret-scanning and push-protection measures. The exposure spans API keys, cloud credentials, and service tokens, representing active risk for any organization whose developers push to public repos. Security teams should audit repositories for leaked secrets and enforce automated secret scanning with mandatory block policies on push.

Read full article → https://www.bleepingcomputer.com/news/security/ove…

Relevance score: 74.0/100

# More from October 01

  1. 1
    Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution The Hacker News
  2. 2
    Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected CyberScoop
  3. 3
    Cisco warns of new SD-WAN zero-day exploited in attacks BleepingComputer
  4. 4
    Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets The Hacker News
  5. 5
    Bitget hacked via zero-day in third-party security products BleepingComputer
  6. 6
    New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses The Hacker News
  7. 7
    Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT The Hacker News
  8. 8
    Alleged ShinyHunters leader arrested in the Netherlands CyberScoop
  9. 9
    Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks SecurityWeek