Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Anthropic’s Claude Code has exposed thousands of passwords, API keys and other sensitive credentials through a feature created to simplify developers’ daily work, according to research from software security firm Apiiro.
Summary
The researchers identified 2,539 distinct secrets across 1,994 public GitHub repositories, including credentials that could provide access to cloud infrastructure and enterprise applications.
This is a brief wire summary, the full story (linked below) has the complete details.
KazaSec's take
Most public cloud incidents trace back to a misconfiguration, an overly permissive IAM role, a storage bucket left open, a default setting nobody revisited, rather than a flaw in the cloud provider itself. A cloud security review is built to catch exactly that class of mistake before it's found the hard way.
Coverage details
We've archived 677 other articles touching the same topic (social - facebook, ai, devsecops) , see the full security news archive.
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.