Exposure of 26,400 Active Cloud and AI Credentials in Public Gitee Repositories

A researcher discovered 26,400 active cloud and AI service credentials in public Gitee repositories, which remained functional upon testing. The exposure highlights significant security risks from improper credential management in code repositories.

26,400 credentials that developers left in public code on Gitee, a Chinese code-hosting service, still worked when a researcher tested them. Anyone who copied one from that code could have used it.

Independent researcher Ben Zimmermann found them by scanning 7.25 million public Gitee repositories and reported the results on October 28. Most were keys for cloud and AI services, led by

Read original article