Submissions from trufflesecurity.com

		TruffleHog now finds all Deleted and Private Commits on GitHub (2024) (trufflesecurity.com)
		3 points by password4321 1 day ago \| past \| discuss
		Claude Tried to Hack 30 Companies.Nobody Asked It To (trufflesecurity.com)
		5 points by ki4jgt 22 days ago \| past
		Claude Tried to Hack 30 Companies. Nobody Asked It To (trufflesecurity.com)
		2 points by RobLach 30 days ago \| past \| 1 comment
		Claude Tried to Hack 30 Companies. Nobody Asked It To (trufflesecurity.com)
		2 points by riverdroid 32 days ago \| past \| 2 comments
		Google API keys weren't secrets, but then Gemini changed the rules (trufflesecurity.com)
		1291 points by hiisthisthingon 45 days ago \| past \| 304 comments
		TruffleHog now detects public-key JWTs and verifies them for liveness (trufflesecurity.com)
		2 points by SnowflakeOnIce 3 months ago \| past
		GitLab scan finds 17,000 secrets in public repos, leading to $9000+ in bounties (trufflesecurity.com)
		30 points by adrianwaj 4 months ago \| past \| 12 comments
		How to Scan Force Pushed Commits for Secrets (trufflesecurity.com)
		20 points by mmcclure 8 months ago \| past \| 6 comments
		GCP CloudQuarry: Searching for Secrets in Public GCP Images (trufflesecurity.com)
		18 points by mooreds 8 months ago \| past
		Searching for Secrets in Public GCP Images (trufflesecurity.com)
		2 points by alexcos 8 months ago \| past
		I scanned all of GitHub's "oops commits" for leaked secrets (trufflesecurity.com)
		203 points by elza_1111 9 months ago \| past \| 110 comments
		I Scanned all of GitHub's "Oops Commits" for Leaked Secrets worth $25k in B (trufflesecurity.com)
		1 point by todsacerdoti 9 months ago \| past \| 1 comment
		This is how you build an AI Ransomware Worm (trufflesecurity.com)
		1 point by austinallegro 9 months ago \| past
		Driftwood: Know if private keys are sensitive (trufflesecurity.com)
		1 point by fanf2 on March 18, 2025 \| past
		Research Finds 12,000 'Live' API Keys and Passwords in DeepSeek's Training Data (trufflesecurity.com)
		7 points by bathtub365 on March 3, 2025 \| past \| 2 comments
		I found a backdoor into my bed (trufflesecurity.com)
		980 points by riverdroid on Feb 21, 2025 \| past \| 385 comments
		Vigilante Justice on GitHub (trufflesecurity.com)
		2 points by campuscodi on Jan 19, 2025 \| past
		Secrets Leak in CI/CD Pipelines (trufflesecurity.com)
		1 point by aquastorm on Jan 17, 2025 \| past
		Google’s OAuth login doesn’t protect against purchasing a failed startup domain (trufflesecurity.com)
		503 points by simiones on Jan 14, 2025 \| past \| 285 comments
		Postman is largest public source of leaked secrets? (trufflesecurity.com)
		22 points by Letmetest on Dec 12, 2024 \| past
		Anyone Can Access Private Azure Repo Data (trufflesecurity.com)
		2 points by __0x1__ on Sept 12, 2024 \| past
		Hugging Face Now Automatically Detects Leaked Secrets (trufflesecurity.com)
		3 points by __0x1__ on Sept 4, 2024 \| past
		TruffleHog now finds all Deleted and Private Commits on GitHub (trufflesecurity.com)
		15 points by riverdroid on Aug 5, 2024 \| past \| 2 comments
		Secrets are not a code security problem (trufflesecurity.com)
		2 points by computersuck on July 25, 2024 \| past
		Anyone can access deleted and private repository data on GitHub (trufflesecurity.com)
		1983 points by __0x1__ on July 24, 2024 \| past \| 374 comments
		Credentials Leaking with Subdomain Takeover (trufflesecurity.com)
		3 points by ncts on June 8, 2024 \| past
		(The) Postman Carries Lots of Secrets (trufflesecurity.com)
		1 point by aa_is_op on April 28, 2024 \| past
		(The) Postman Carries Lots of Secrets (trufflesecurity.com)
		4 points by emilburzo on April 26, 2024 \| past
		Google OAuth is broken (sort of) (trufflesecurity.com)
		350 points by mooreds on Dec 21, 2023 \| past \| 182 comments
		Google OAuth is broken (sort of) (trufflesecurity.com)
		2 points by chillax on Dec 20, 2023 \| past
		More

HN For You