gcdRadar

credentials

3 live · 5 on record · last incident 4 days ago

Dec ’25records per month, by first reportNov ’26

Live3

  1. live
    Claude Code + SDKs Claude Code Inadvertently Leaks Credentials to Public Repositories

    Research · since 10 Nov 2026

    Researchers demonstrated that an AI coding tool command accidentally saves files containing credentials to public repositories. Organizations utilizing the tool face potential exposure of sensitive internal data.

    Do:Review public repositories for accidentally committed credential files created by development tools.

    AI
  2. live
    DreamHost File Manager DreamHost confirms breach exposed customer FTP credentials and webmail sessions

    Breaches & attacks · Real loss · since 4 Nov 2026

    DreamHost issued a warning after attackers gained unauthorized access to its File Manager platform for two months. The breach exposed customer FTP and SFTP usernames and passwords.

    Do:Reset FTP and SFTP passwords and review webmail access logs.

  3. live
    Northflank Northflank security breach leads to unauthorized use of AI API keys

    Breaches & attacks · Real loss · since 31 Oct 2026

    Cloud hosting platform Northflank suffered a security breach where attackers accessed stored secrets. The incident resulted in the unauthorized use and exposure of customers' AI API keys.

    Do:Rotate all credentials and secrets stored on the Northflank platform.

    AI

Earlier2

  1. closed
  2. closed
    AI