Glossary
Secrets Management
The practice of securely storing, distributing, and rotating sensitive credentials such as API keys, passwords, and certificates used by applications and automated systems, typically through a dedicated vault rather than hardcoding them into source code. Hardcoded secrets accidentally committed to public code repositories are a recurring, preventable cause of breaches.
Recent coverage mentioning Secrets Management
METR Suffers API Key Credential Theft, $600,000 Loss
AI model evaluator METR experienced credential theft, leading to an API key compromise and $600,000 in public AI model credit consumption.
BREEZE COMET Exploits Brazilian Financial Systems
BREEZE COMET, a financially motivated threat actor, targets Brazilian financial services for fraudulent transfers, leveraging custom malware and AI for development.
CISA GitHub Repo Exposes Secrets & Credentials in Public View
CISA inadvertently exposed sensitive secrets and credentials within a publicly accessible GitHub repository.
Advertisement