Over 543,000 GitHub Credentials Remain Active After Being Publicly Exposed

An analysis of public GitHub code has uncovered 543,699 unique credentials that remained valid when researchers tested them on July 27 and 28, 2026. The findings expose a secret-management failure: credentials can remain usable for years after developers publish them, despite GitHub’s secret-scanning and push-protection controls. According to... Weiterlesen