CYBERSECURITYTRACKER
Permanent story citation

26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11752

As cited

Copy frozen at (site build).

cloud saas

26,400 Valid Cloud and AI Credentials Found Exposed in Public Gitee Repositories

An independent researcher discovered 26,400 valid credentials exposed in public Gitee repositories after scanning 7.25 million repositories on the Chinese code-hosting platform. The exposed credentials, primarily for cloud and artificial intelligence (AI) services, remained functional at the time of testing and could have been exploited by any unauthorized party accessing the public code.

Why it matters: Cloud and AI service administrators and developers need to audit their credentials and access keys immediately, revoke those that may have been pushed to public repositories, and implement preventative measures to stop credential commits in the first place.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary