CYBERSECURITYTRACKER
Permanent story citation

Nearly 1.5 million exposed secrets targeted in new revocation program

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12530

As cited

Copy frozen at (site build).

identity access

Nearly 1.5 million exposed secrets targeted in new revocation program

Truffle Security launched a free Secrets Revocation Program to address 1.4 million exposed application programming interface (API) keys and credentials discovered in public repositories. The initiative helps credential issuers identify and revoke these still-valid secrets before attackers can exploit them.

Why it matters: Organizations using exposed API keys face unauthorized access to their systems and data; practitioners should assess whether their credentials appear in this dataset and revoke them immediately.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary