@hugovalters.bsky.socialA hardcoded AWS key in a helper script got scraped off GitHub in 90 seconds. Detection, rotation, and prevention that scale:
https://www.valtersit.com/guides/security/hardcoded-passwords-in-scripts-thats-not-automation-thats-a-breach/
#secretsmanagement #devsecops
@opsmatters.comThe latest update for #GitGuardian includes "The campaign that never stopped: tracking GhostAction from 2025 to 2026" and "#SecretsManagement Best Practices: 6 Reasons Your Vault Needs Detection".
#cybersecurity #DevOps #infosec #appsec https://opsmtrs.com/3XY1xZb
@thedailytechfeed.comCredentials everywhere. AI agents, repos, laptops all part of the attack surface now. #CredentialSecurity #DevSecOps #AI #SecretsManagement #Cybersecurity #CloudSecurity https://thedailytechfeed.com/enterprises-losing-visibility-as-credential-complexity-surges/
@securityonline.bsky.socialDiscover critical OpenBao security vulnerabilities that lead to code execution. Learn how to patch these OpenBao security vulnerabilities now.
#OpenBao #Cybersecurity #Vulnerability #SecretsManagement #DevSecOps
@hugovalters.bsky.socialYour Ansible Vault password file is sitting in ansible.cfg and grep finds it. Vault IDs, CI patterns, rotation, and where it isn't a secrets manager: https://www.valtersit.com/guides/automation/ansible-vault-encrypting-secrets-in-version-control/
#ansible #devsecops #secretsmanagement
@hugovalters.bsky.socialdocker run -e DB_PASSWORD=... is how credentials end up in logs and public issue trackers. Docker secrets exist for this. Learn when env vars are still fine.
https://www.valtersit.com/guides/docker/docker-secrets-vs-env-vars-credential-management/
#docker #devsecops #secretsmanagement
@hugovalters.bsky.socialYour .env file is a credential leak waiting to happen. Vault plus dynamic secrets can kill static keys for good. Here's the blueprint.
#devsecops #vault #secretsmanagement
@thedailytechfeed.comMarimo’s RCE flaw allows AWS credential theft and bastion SSH access inside 8 seconds—patch now. #CloudSecurity #Marimo #AWS #RCE #SecretsManagement #DevSecOps https://thedailytechfeed.com/marimo-rce-lets-hackers-grab-aws-secrets-and-ssh-bastion-access-in-8-seconds/
@jmm86.bsky.socialInsight: Sensitive output values in Terraform still show up in state files. If your state backend isn't encrypted, your API keys are exposed. Use tools like Vault to manage secrets securely. 🔒 #terraformsecurity #secretsmanagement
@helpnetsecurity.comProduct showcase: Doppler secures secrets for humans, pipelines, and AI agents
📖 Read more: www.helpnetsecurity.com/2026/09/08/p...
#cybersecurity #cybersecuritynews #secretsmanagement #AIsecurity #AIAgents #DevSecOps #MCP