In plain sight: hunting secrets shared in code
About this episode
The episode discusses the issue of hard-coded secrets in code repositories and the impact of AI on this problem.
Security researchers have found millions of hard-coded secrets, in plain text, across both public and private code repositories. These include credentials, API keys, AI tokens and MCP configuration files. And AI is making the problem worse, with AI-assisted commits adding to this "secrets sprawl". Unless developers control how they manage secrets in their code, we are leaving the door open to malicious actors. And the growth of non-human identities (NHIs) only makes it worse. Our guest is Dwayne McDaniel, principal developer advocate at GitGuardian, which recently published their research into secrets sprawl.
More episodes of Security Insights
- Security through community: Ameet Jugnauth, ISACA
- Quantum, cryptography and Q Day: are we ready?
- DDoS: complex attacks, persistent threats
- CISO Interview: Mike Baker, DXC Technology
- Insights Interview: Haider Pasha, CSO EMEA and LATAM, Palo Alto Networks
- Inside threat intelligence: Rafe Pilling, Sophos
Explore listener stats, chart rankings, contacts and more on the Security Insights podcast page.