Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

datadog

Identify the secrets that make your cloud environment more vulnerable to an attack

Oct 30, 2024 By Mallory Mooney In Datadog
Compromised secrets, such as leaked API and SSH keys, credentials, and session tokens, are the leading cause of cloud security incidents. While attackers can directly compromise secrets through methods like phishing, they can also gain control by finding and taking advantage of simple misconfigurations in your environment.
Read Post
nightfall

How To Prevent Secrets Sprawl

Oct 28, 2024 By Isaac Madan In Nightfall
Where are your credentials and secrets, and how are you protecting them? These are fair questions, considering the pervasiveness of secrets sprawl. We recently conducted research over 12 months to determine where enterprises’ secrets were residing within their systems, like GitHub, Confluence, Zendesk and Slack. In addition to API keys and passwords, secrets like SSL certificates, usernames and others are spilling into enterprises’ cloud environments and increasing the risk of a breach.
Read Post
gitguardian

How To Get There: Bridging The Technology Gap Preventing You From Adopting A Secrets-free Machine Identity Framework

Sep 27, 2024 By Dwayne McDaniel In GitGuardian
Learn how GitGuardian can help you go from a world of secrets sprawl to a future with secrets-free machine identity frameworks by adopting SPIFFE/SPIRE.
Read Post

Detect Secrets In Microsoft Teams With GitGuardian

Sep 3, 2024 By GitGuardian In GitGuardian
GitGuardian can now help you find and remediate secrets exposed in your Microsoft Teams channels. We have extended the real-time detection capability of our secrets detection platform to include the popular communications tooling to help teams better fight secrets sprawl throughout their organizations Once integrated, whenever a plaintext credential is accidentally posted to Teams messages, GitGuardian will create an alert and the incident will appear in your GitGuardian dashboard, allowing you to remediate it like any other leaked secret.
View Video
Snyk

Finding and fixing exposed hardcoded secrets in your GitHub project with Snyk

Jun 25, 2024 By Chandler Mayo In Snyk
Snyk is an excellent tool for spotting project vulnerabilities, including hardcoded secrets. In this blog, we'll show how you can use Snyk to locate hardcoded secrets and credentials and then refactor our code to use Doppler to store those secrets instead. We'll use the open source Snyk goof project as a reference Node.js boilerplate application, so feel free to follow along with us.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.