Curated security research, vulnerabilities, advisories and tools for practitioners.

#credentials

Security coverage tagged credentials.

1.

And another one. GitHub ships break-glass credential revocation

blog | 2026-07-01 00:00 | aikido.dev | original ↗ | #supply-chain | #incident-response | #credential-security

2.

Keys to the Kingdom Live Stripe Credentials Exposed via Unauthenticated OAuth Endpoint

blog | 2026-05-12 11:55 | labs.cognisys.group | original ↗ | #information-disclosure | #api-security | #oauth

3.

Top AWS re:Invent Announcements for Security Teams in 2025

blog | 2025-12-08 21:54 | wiz.io | original ↗ | #cloud | #cloud-security | #aws

4.

Level Up Your Container Security: Introducing the JFrog Kubelet Credential Provider

blog | 2025-12-03 13:57 | jfrog.com | original ↗ | #kubernetes | #container-security | #jfrog

5.

Secrets Detection: A Practical Guide to Finding and Preventing Leaked Credentials

blog | 2025-11-12 00:00 | aikido.dev | original ↗ | #git | #ci-cd | #sast

6.

From Compromised Keys to Phishing Campaigns: Inside a Cloud Email Service Takeover

blog | 2025-09-04 16:39 | wiz.io | original ↗ | #cloud | #cloud-security | #aws

7.

A new type of long-lived key on AWS: Bedrock API keys

blog | 2025-08-21 12:18 | wiz.io | original ↗ | #cloud | #cloud-security | #aws

8.

The Largest Data Breach Ever? How Hackers Stole 16 Billion Credentials

incident | 2025-07-09 00:00 | netlas.io | original ↗ | #infostealer | #account-security | #data-breach

9.

The many ways to obtain credentials in AWS

blog | 2024-12-20 13:00 | wiz.io | original ↗ | #cloud | #cloud-security | #aws

10.

Concealing payloads in URL credentials

research | 2024-10-23 14:03 | portswigger.net | original ↗ | #firefox | #web-security | #dom-xss

11.

Provisioning cloud infrastructure the wrong way, but faster

blog | 2024-08-27 13:00 | blog.trailofbits.com | original ↗ | #ai-security | #cloud | #cloud-security

12.

EzAdsPro BlackBox Advisory

blog | 2023-01-25 00:00 | bishopfox.com | original ↗ | #information-disclosure | #pii | #credentials

13.

Providing Access to your Program: Sharing Isn’t Caring

blog | 2016-12-12 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #bugcrowd | #program-management