Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

gitguardian

OWASP Top 10 Kubernetes Security Risks Explained: Why Credentials Deserve a Closer Look

Oct 26, 2026 By Dwayne McDaniel In GitGuardian
GitGuardian researchers reached 44 active Kubernetes clusters through leaked secrets, and 30% had been exposed for more than two years. Here’s how the OWASP Kubernetes Top 10 explains these Kubernetes security risks, and why K03, Secrets Management Failures, turns one leak into a chain.
Read Post

Vibe Coding Has a Security Problem (And How to Fix)

Oct 23, 2026 By GitGuardian In GitGuardian
I vibe coded a working app in 10 minutes without writing a single line of code. It ran fine. It also had a hardcoded API key, a database password sitting in a Model Context Protocol (MCP) config file, and an npm package I never checked. In episode one of Secure Vibe Coding, we look at what AI-assisted coding means for secrets security, using data from GitGuardian's State of Secrets Sprawl 2026 report.
View Video
gitguardian

Responding to php2shell PHP Vulnerability When You Don't Know What Secrets Are Deployed

Oct 22, 2026 By Cybersecurity research team In GitGuardian
On Oct. 21, 2026, PHP fixed a vulnerability named php2shell by Calif. Pre-auth RCE under default configurations, confirmed on common CMS, webmail, e-commerce, file sharing, and database administration applications. A PHP server also stores and uses credentials, so this is a secret theft vector.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.