Security researcher RyotaK has shared a series of vulnerabilities that all have to do with how Git interfaces with external credential managers. In short, while Git guards against newline characters ( ...

More than 500 GitHub accounts committed credential-stealing workflows to tens of thousands of repositories since October 7, ...

GitHub's new AI detector checks code for exposed passwords and credentials, expanding push protection to prevent more secret ...

Two recent security issues with Git and its related tools have been fixed, so users should update their software. The vulnerabilities, CVE-2024-53263 and CVE-2024-53858, involve issues with credential ...

GitGuardian found 28.65 million new hardcoded secrets in public GitHub commits in 2025, up 34% year over year.

MCP credential exposure puts API keys and access tokens at risk as hardcoded secrets remain in public GitHub configuration files.

GitHub rotated keys potentially exposed by a vulnerability patched in December that could let attackers access credentials within production containers via environment variables. This unsafe ...

More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform's security measures to prevent accidental leaks of sensitive data.

Tensorlake npm SDK 0.5.144 was compromised in a ChainDrop supply chain attack, delivering an obfuscated credential-stealing ...