1.And another one. GitHub ships break-glass credential revocationblog | 2026-07-01 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #incident-response | #credential-security
2.Keys to the Kingdom Live Stripe Credentials Exposed via Unauthenticated OAuth Endpointblog | 2026-05-12 11:55 | labs.cognisys.group | Original ↗ | .md | #information-disclosure | #api-security | #oauth
3.Top AWS re:Invent Announcements for Security Teams in 2025blog | 2025-12-08 21:54 | wiz.io | Original ↗ | .md | #cloud | #cloud-security | #aws
4.Level Up Your Container Security: Introducing the JFrog Kubelet Credential Providerblog | 2025-12-03 13:57 | jfrog.com | Original ↗ | .md | #ai-security | #kubernetes | #container-security
5.Secrets Detection: A Practical Guide to Finding and Preventing Leaked Credentialsblog | 2025-11-12 00:00 | aikido.dev | Original ↗ | .md | #git | #ci-cd | #sast
6.Decrypting VM Extension Settings with Azure WireServerblog | 2025-10-23 00:00 | netspi.com | Original ↗ | .md | #cloud | #red-team | #azure
7.From Compromised Keys to Phishing Campaigns: Inside a Cloud Email Service Takeoverblog | 2025-09-04 16:39 | wiz.io | Original ↗ | .md | #cloud | #cloud-security | #aws
8.A new type of long-lived key on AWS: Bedrock API keysblog | 2025-08-21 12:18 | wiz.io | Original ↗ | .md | #cloud | #cloud-security | #aws
9.The Largest Data Breach Ever? How Hackers Stole 16 Billion Credentialsincident | 2025-07-09 00:00 | netlas.io | Original ↗ | .md | #infostealer | #account-security | #data-breach
10.The many ways to obtain credentials in AWSblog | 2024-12-20 13:00 | wiz.io | Original ↗ | .md | #cloud | #cloud-security | #aws
11.Concealing payloads in URL credentialsresearch | 2024-10-23 14:03 | portswigger.net | Original ↗ | .md | #firefox | #web-security | #dom-xss
12.Provisioning cloud infrastructure the wrong way, but fasterblog | 2024-08-27 13:00 | blog.trailofbits.com | Original ↗ | .md | #ai-security | #cloud | #cloud-security
13.Mistaken Identity: Extracting Managed Identity Credentials from Azure Function Appsblog | 2023-11-16 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #azure
14.EzAdsPro BlackBox Advisoryblog | 2023-01-25 00:00 | bishopfox.com | Original ↗ | .md | #information-disclosure | #pii | #credentials
15.A Beginners Guide to Gathering Azure Passwordsblog | 2020-10-22 00:00 | netspi.com | Original ↗ | .md | #cloud | #powershell | #azure
16.Attacking Azure Container Registries with Compromised Credentialsblog | 2020-05-12 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #containers
17.Gaining AWS Console Access via API Keysblog | 2020-03-18 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #aws
18.Get-AzurePasswords: Exporting Azure RunAs Certificates for Persistenceblog | 2019-02-27 00:00 | netspi.com | Original ↗ | .md | #cloud | #automation | #azure
19.Get-AzurePasswords: A Tool for Dumping Credentials from Azure Subscriptionsblog | 2018-08-28 00:00 | netspi.com | Original ↗ | .md | #cloud | #powershell | #azure
20.Providing Access to your Program: Sharing Isn’t Caringblog | 2016-12-12 00:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #bugcrowd | #program-management