Topic
Secrets
3 stories about Secrets that passed the news check, newest first.
Security ·
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
Passwords and API keys typed into commands that users approved with “Yes, and don’t ask again” in Claude Code were saved verbatim to .claude/settings.local.json.
The Hacker News · 4 sources
Security ·
Threat actors use agentic AI tooling to find and abuse exposed secrets
Microsoft Threat Intelligence reports that threat actors are using agentic AI tooling to find and abuse exposed secrets.
Microsoft Security Blog
Launch ·
Nearly 1.5 million exposed secrets targeted in new revocation program
Truffle Security has launched the Secrets Revocation Program, a free initiative.
BleepingComputer