Tag: api key management
3 articles
Exposed Cloud Credentials Abound in Public Gitee Repositories
A recent scan of public Gitee repositories uncovered a staggering 26,400 exposed cloud credentials that still worked when tested, highlighting the alarming risk of long-discarded secrets remaining live and exploitable. This shocking discovery was made by independent researcher Ben Zimmermann, who analyzed a massive 7.25 million public repositories.
LiteLLM Gateways Expose Cloud Credentials to Risk with Default Admin Key
Thousands of LiteLLM gateways are leaving cloud credentials vulnerable due to a shocking security flaw: nearly 300 online gateways accepted a default admin key, granting hackers unrestricted access to sensitive data and cloud accounts. This easily exploitable weakness puts countless organizations at risk of devastating breaches.
Google API Keys Remain Usable for 23 Minutes After Deletion
Deleting a Google API key doesn't mean it's immediately useless to hackers - in fact, our experiments show it can remain active for up to 23 minutes, allowing attackers to continue misusing it even after you've tried to revoke access.