Escape’s security research team scanned 189.5 million URLs and found more than 18,000 exposed API secrets. 41% of exposed secrets were highly critical, i.e. could lead to financial risks for the organizations. Exposed API secrets The exposed secrets include hundreds of Stripe, GitHub/GitLab tokens, RSA private keys, OpenAI keys, AWS tokens, Twitch secret keys, cryptocurrency exchange keys, X tokens, and Slack and Discord webhooks. GitGuardian’s ‘The State of Secret Sprawl’ indicates a 67% increase in … More →

The post Researchers discover exposed API secrets, impacting major tech tokens appeared first on Help Net Security.