Please turn JavaScript on
Find more feeds

GitGuardian Blog - Take Control of Your Secrets Security

Following GitGuardian Blog - Take Control of Your Secrets Security's news feed is very easy. Subscribe using the "follow" button on the top right and if you want to, choose the updates by topic or tag.

We will deliver them to your inbox, your phone, or you can use follow.it like your own online RSS reader. You can unsubscribe whenever you want with one click.

Keep up to date with GitGuardian Blog - Take Control of Your Secrets Security!

GitGuardian Blog - Take Control of Your Secrets Security: GitGuardian Blog - NHI Governance & Secrets Security

Is this your feed? Claim it!

Publisher:  Unclaimed!
Message frequency:  0.6 / day

Message History

Coding Agent Security for AppSec Leaders: Start With What Agents Can Reach
TL;DRCoding agent security extends beyond generated code: Agents can read local files, use credentials, call APIs, and interact with systems that may never appear in a diff.Reach determines blast radius: A forgotten or over-scoped credential can give an agent far more authority than the task requires.Written rules need t...

Read full story
AntiFox Targeting AWS Credentials: The Latest Wave of AI Agent Attacks

TL;DR

The hacking agent got a sequel in under a week: AntiFox, a fork of ARTEX, now points the same agentic playbook at AWS. Hundreds of API requests in about 30 minutes were enough to reach production secrets.It does not even need a secrets scanner: Only 4 of roughly 45 attack frameworks ship one, yet an ARTEX build with ...

Read full story
An ARTEX build ships no secret scanner. In our lab, it found the secrets anyway
TL;DRARTEX found 8 of 9 secrets without a scanner. The tested build had no dedicated secret-scanning code. In a controlled experiment, the model used git and grep to find eight of nine planted credentials.It searched for secrets without being asked. A generic prompt to “assess the security posture” triggered the same credential ...

Read full story
Beyond ARTEX: 45 Agentic Attack Frameworks, What They Hunt For, and How to Find Them
TL;DRAbout 45 open-source frameworks now automate attacks: Each one wires a language model into a loop that runs tools and acts on their output. We cataloged 32 of them into five families; the rest are forks and variants.Four ship a real secret scanner, but none ships the full pipeline: Pojun, Cybermes, Xalgorix, and AIRecon wire a scanner to th...

Read full story
Claude Code settings.local.json Secrets: 17 months of exposure on GitHub, & Docker Hub
TL;DR31,088 secrets, 5,343 valid: GitGuardian found 31,088 distinct secrets in Claude Code’s .claude/settings.local.json on public GitHub, across 23,276 repositories, and 5,343 of them worked when we detected them.“Yes, and don’t ask again” writes the key: approving a command permanently makes Claude Code save an allow rule that is the command s...

Read full story