Category · 11 articles

Secrets & Credentials

Secrets & Credentials articles from the Axeploit team: attack chains, detection guidance, and practitioner deep dives.

9,300 Leaked AWS Keys Are Still Live. One of Them Might Be Yours.
LatestSecrets & Credentials

10 min read

9,300 Leaked AWS Keys Are Still Live. One of Them Might Be Yours.

A same-day runbook with copy-paste commands to find live leaked keys in your accounts and code, rotate them without downtime, and replace long-lived.…

By Axeploit Team
Read article
IDOR at Scale: Why One Broken Object Reference Can Mean a Full Customer Data Leak
Secrets & Credentials

17 min read

IDOR at Scale: Why One Broken Object Reference Can Mean a Full Customer Data Leak

Tata Electronics Confirmed a Breach. World Leaks Dumped the Files. Now What?
Secrets & Credentials

6 min read

Tata Electronics Confirmed a Breach. World Leaks Dumped the Files. Now What?

How Logging Becomes a Liability: When Your Observability Stack Leaks Secrets
Secrets & Credentials

11 min read

How Logging Becomes a Liability: When Your Observability Stack Leaks Secrets

The Secrets Sprawl Epidemic: Securing Hardcoded Credentials in the Era of Multi-Cloud
Secrets & Credentials

7 min read

The Secrets Sprawl Epidemic: Securing Hardcoded Credentials in the Era of Multi-Cloud

Keep reading

More articles

Autonomous Intrusions: How Hackers Weaponized LLM Agents via the Marimo RCE (CVE-2026-39987)

Autonomous Intrusions: How Hackers Weaponized LLM Agents via the Marimo RCE (CVE-2026-39987)

secrets

Multi-Tenant SaaS Security: How Tenant Isolation Failures Become Your Worst Breach

Multi-Tenant SaaS Security: How Tenant Isolation Failures Become Your Worst Breach

secrets

Retrieval-Augmented Generation Security: The New Data Exfiltration Path

Retrieval-Augmented Generation Security: The New Data Exfiltration Path

secrets

Comment and Control: Prompt Injection Credential Theft via Claude Code, Gemini CLI, and GitHub Copilot

Comment and Control: Prompt Injection Credential Theft via Claude Code, Gemini CLI, and GitHub Copilot

secrets

Fiverr Is Leaking Server Credentials and VPN Passwords on Google Right Now

Fiverr Is Leaking Server Credentials and VPN Passwords on Google Right Now

secrets

Your API Keys Are on GitHub Right Now. Here's How Attackers Find Them.

Your API Keys Are on GitHub Right Now. Here's How Attackers Find Them.

secrets