Tag

Secrets

23 articles

Latest in Secrets

threat modeling, threat, security, secure design, threat modeling, supply chain Codenotary insider threats

DevSecOps

Bad Actor Drops 36 Malicious Packages in npm, Targets Guardarian Users

The npm code repository is again being used by a bad actor to launch a supply chain attack that includes three dozen malicious packages that appear as Strapi CMS plugins but deliver a range of threats. Strapi is a popular open sou…

Apr 6, 20263 min

All Secrets Articles

Showing 1–23 of 23

Nov04

Your Next Secrets Leak is Hiding in AI Coding Tools

AI coding tools are accelerating secrets sprawl in Kubernetes workflows. Learn where leaks happen and how platform teams can contain the risk.

3 min

Apr15

Blogs

Report: Commercial Software Just as Vulnerable as Open Source

An analysis published by ReversingLabs, a provider of tools for securing application development environments, suggests that commercial software used in software supply chains is j…

3 min

Mar26

Blogs

Pulumi Extends Security Reach to Include Managing Secrets and Policy-as-Code

Pulumi today extended the reach of its Environments, Secrets and Configurations (ESC) platform for managing infrastructure-as-code (IaC) into the realm of DevSecOps by adding the a…

3 min

Mar11

Blogs

Analysis of GitHub Repositories Surfaces Nearly 23M Secrets

An analysis of public GitHub repositories published today finds 22.8 million hardcoded secrets, representing a 25% increase since a similar study was done a year ago.

3 min

Jan23

Blogs

The State of Application Risk: Key Findings Reveal Widespread Security Vulnerabilities

New research reveals that 100% of organizations face critical app security risks. Learn key findings and essential steps to protect your software development pipeline.

3 min

Dec19

Blogs

Legit Security Adds Ability to Scan Personal GitHub Repositories for Secrets

Legit Security today extended its ability to scan for secrets in software to include any that might reside in the personal GitHub repositories of application developers.

3 min

Nov21

Blogs

Checkmarx Extends DevSecOps Reach to Repository Security and Secrets Discovery

Checkmarx this week extended the scope of its ability to protect software supply chains with tools that access how secure a repository is and find where application secrets have be…

3 min

Oct30

Blogs

Survey Shines Spotlight on Inability to Keep Application Secrets

A global survey of 1,000 IT leaders from organizations with more than 500 employees published today finds that 79% have experienced or are aware of secrets leaking within their org…

3 min

Jul02

Blogs

Aqua Security Shines Spotlight on Secrets Management Blindspots

A report published by Aqua Security finds that as many as 18% of secrets inadvertently exposed are not being discovered.

3 min

Feb09

Application Performance Management/Monitoring

GitGuardian Allies With CyberArk to Better Protect App Secrets

GitGuardian has allied with CyberArk to streamline secrets detection and management by making it easier to share insights.

3 min

Dec18

Blogs

Sonar Adds Secrets Detection to Code Analysis Portfolio

Sonar has added a secrets detection capability to its portfolio of tools for analyzing code and DevOps workflows.

3 min

Oct17

Blogs

GitGuardian Adds Tool for Discovering Secrets in Public Repositories

GitGuardian added a tool that makes it possible for DevOps teams to search GitHub repos to determine if secrets have inadvertently found their way into other apps.

3 min

Oct10

Blogs

Pulumi Previews Tool to Integrate Secrets and Infrastructure Management

Pulumi previewed a tool that enables DevOps teams to unify environments, secrets and configuration (ESC) management.

3 min

Jun29

Blogs

HashiCorp Acquires BluBracket to Extend Secrets Management Reach

HashiCorp this week acquired BluBracket to add a set of static secrets discovery tools to its portfolio.

3 min

May09

Blogs

GitGuardian Survey Surfaces Secrets Management Challenges

A survey of 507 IT decision-makers in the U.S. and the United Kingdom published today found 75% of respondents said a secret leaked from at least one application, with 60% noting t…

3 min

Mar13

Blogs

GitGuardian: 10M Exposed Secrets on GitHub

GitGuardian published an analysis of more than one billion commits to GitHub repositories that found 10 million occurrences of secrets, with one out of 10 developers exposing a sec…

3 min

Jul11

DevOps Practice

GitGuardian Tightens Integration With GitHub to Secure Secrets

GitGuardian has expanded its ability to secure code repositories by providing deeper integration with GitHub. Ziad Ghalleb, product marketing manager for GitGuardian, said the resu…

3 min

May25

Blogs

The Scanner We Really Need

IT has scanners for everything. And by everything, I mean everything. We scan source code for vulnerabilities and data leaks. We scan apps for vulnerabilities. We scan the network…

3 min

May20

Blogs

Managing Hardcoded Secrets to Shrink Your Attack Surface

The practice of hardcoding secrets—such as authentication credentials, passwords, API tokens and SSH Keys—as non-encrypted plain text into source code or scripts has been common in…

3 min

Feb02

Blogs

It is Time to Secure Git

At this point, we’ve got a ton of experience with the bits of Git that we use. And locking down Git is well-documented. Okay, it is documented; we can say that, at least. Interesti…

3 min

Nov23

Best of 2021

DevOps Teams Struggling to Keep Secrets

A growing number of organizations are suffering security incidents related to exposed secrets in DevOps CI/CD pipelines, according to a recent ThycoticCentrify report. The study pa…

3 min

Jul20

Blogs

Don’t Look at This! IT’S A SECRET!

To continue the discussion about secrets after perusing this excellent report by GitGuardian—last time I went a little nuts about the number of secrets exposed in IT folks’ persona…

3 min