Tag

secrets management

40 articles

Latest in secrets management

Secrets Sprawl and Rotation: A Practical Vault Management Playbook

In 2025 alone, security firm GitGuardian detected 28.65 million new hardcoded secrets exposed in public GitHub commits — a 34% increase year over year and the largest single-year jump the company has recorded in five years of publ…

Oct 8, 20263 min

All secrets management Articles

Showing 1–24 of 40

Sep24

Blogs

GitHub Gives Enterprises a Full Count of Who Holds the Keys

GitHub Enterprise Cloud now lets organizations export a full inventory of credentials, helping security teams identify stale, overprivileged and forgotten access across users, apps…

3 min

Sep23

Blogs

Your AI Coding Assistant Has the Keys to the Repo. Z.ai Just Showed Why That Matters

ZCode’s default-on indexing feature reportedly uploaded entire developer workspaces to cloud storage, highlighting why AI coding assistants should be treated as privileged software…

3 min

Sep18

Blogs

Why Your CI/CD Pipeline Is Your Most Unprotected Attack Surface

CI/CD pipelines often hold privileged credentials, execute third-party code and connect directly to production, making pipeline security one of the most overlooked risks in modern…

3 min

Sep16

Blogs

Why MLOps Pipelines Need Security Audits

A practical SecMLOps experiment shows how Apache Airflow ML pipelines can adopt DevSecOps controls for secrets, validation, artifact integrity and auditable security evidence.

3 min

Jun12

Blogs

Shift Left to the Developer’s Machine: Building Local Git Security Gates

Shift left to the developer’s machine. The principle is what matters: Stop secrets before they ship. The tooling is a means to that end.

3 min

May20

1Password Allies With OpenAI to Secure Codex AI Coding Tool

DevSecOps teams can now manage coding agents as a tenant rather than another vault where secrets might be stored, ensuring credentials are never exposed to an AI agent or LLM as pl…

3 min

Mar06

Video Interviews

Why AI-Generated Code Is Raising the Stakes for Secrets Management

Following a $50 million funding round, GitGuardian CEO Eric Fourrier discusses why secrets security is becoming a much bigger problem in the age of AI-generated code and autonomous…

3 min

Feb18

Blogs

Tool Fragmentation is Breaking Delivery Context — Here’s What Teams are Learning

Explore the emerging crisis in application delivery caused by tool fragmentation in modern software development. This article discusses the need for semantic interoperability, cont…

3 min

Feb18

Blogs

Secrets Management Failures in CI/CD Pipelines

Explore the critical role of secrets management in CI/CD pipelines and its impact on cybersecurity. This article highlights the risks of credential exposure, the importance of impl…

3 min

Oct08

Blogs

Common IaC Security Issues and How to Fix Them

Learn the top five Infrastructure as Code (IaC) security vulnerabilities, their fixes, and best practices to prevent misconfigurations, drifts, and breaches.

3 min

Sep25

Blogs

HashiCorp Embraces Agentic AI to Streamline Management of IT

HashiCorp today added a slew of updates to its platform for managing and securing IT infrastructure, including integration with multiple automation frameworks and a preview of an a…

3 min

Mar11

Blogs

Analysis of GitHub Repositories Surfaces Nearly 23M Secrets

An analysis of public GitHub repositories published today finds 22.8 million hardcoded secrets, representing a 25% increase since a similar study was done a year ago.

3 min

Feb09

Application Performance Management/Monitoring

GitGuardian Allies With CyberArk to Better Protect App Secrets

GitGuardian has allied with CyberArk to streamline secrets detection and management by making it easier to share insights.

3 min

Jan23

Legit Security Applies AI to Detect Vulnerable Application Secrets

Legit Security expanded the scope of its ASPM platform to make use of AI to discover vulnerable application secrets more accurately.

3 min

Dec18

Blogs

Sonar Adds Secrets Detection to Code Analysis Portfolio

Sonar has added a secrets detection capability to its portfolio of tools for analyzing code and DevOps workflows.

3 min

Oct17

Blogs

GitGuardian Adds Tool for Discovering Secrets in Public Repositories

GitGuardian added a tool that makes it possible for DevOps teams to search GitHub repos to determine if secrets have inadvertently found their way into other apps.

3 min

Oct11

Blogs

HashiCorp Streamlines Workflows to Improve Productivity

New HashiCorp tools address everything from streamlining how infrastructure is managed and apps are delivered to how secrets are kept.

3 min

Oct10

Blogs

Pulumi Previews Tool to Integrate Secrets and Infrastructure Management

Pulumi previewed a tool that enables DevOps teams to unify environments, secrets and configuration (ESC) management.

3 min

Jun29

Blogs

HashiCorp Acquires BluBracket to Extend Secrets Management Reach

HashiCorp this week acquired BluBracket to add a set of static secrets discovery tools to its portfolio.

3 min

May09

Blogs

GitGuardian Survey Surfaces Secrets Management Challenges

A survey of 507 IT decision-makers in the U.S. and the United Kingdom published today found 75% of respondents said a secret leaked from at least one application, with 60% noting t…

3 min

Mar14

Blogs

ReversingLabs Adds Ability to Detect Secrets in Application Binaries

ReversingLabs today announced it added an ability to detect secrets exposed in application binaries to its Software Supply Chain Security (SSCS) platform. Tomislav Peričin, chief s…

3 min

Mar13

Blogs

GitGuardian: 10M Exposed Secrets on GitHub

GitGuardian published an analysis of more than one billion commits to GitHub repositories that found 10 million occurrences of secrets, with one out of 10 developers exposing a sec…

3 min

Aug30

Blogs

The Secret to Secrets Management: Reduce Source Code Vulnerabilities

We are in the cyberattack age. From Microsoft to Crypto.com, no company is completely safe from malicious attackers, and it seems as if a new major cyberattack is announced weekly,…

3 min