Skip to content
AI-Driven Credential Exposure Accelerates Security Risks

AI-Driven Credential Exposure Accelerates Security Risks

First seen 4 Oct 2026, 04:08 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 4, 2026 at 06:06 UTC
  • •28.65 million new hardcoded secrets were found in GitHub in 2025, a 34% increase.
  • •AI-assisted commits leak secrets at twice the baseline rate, raising security concerns.
  • •54% of active GitHub developers made their first commit in 2025, increasing exposure risks.

In 2025, GitGuardian reported a staggering 28.65 million new hardcoded secrets in public GitHub commits, a 34% increase from the previous year. AI-assisted commits contributed to credential leaks at twice the baseline rate, while secrets related to AI services surged by 81%. The rise in developer activity, with 54% of active GitHub developers making their first commit in 2025, has exacerbated the issue, leading to compromised machines holding multiple secrets. Security teams are urged to establish reliable reporting channels for external parties to disclose exposed credentials. The current landscape highlights the urgent need for improved governance around credential management as AI tools proliferate. Security experts recommend developing a clear response process for handling reported exposures.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-01-01
GitGuardian report released
GitGuardian published its 2026 State of Secrets Sprawl, revealing alarming trends in credential exposure.
GitGuardian
2025-10-01
AI-related credential leaks surge
Secrets related to AI services grew by 81% year over year, highlighting new risks.
Darkreading
Recent
Security teams urged to improve reporting
Experts recommend establishing clear paths for external reporting of exposed credentials to enhance response efforts.
Darkreading

More articles in this cluster (2)

Following this threat?

Track CISA in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 3

Common questions

What is the scale of credential exposure?
In 2025, 28.65 million hardcoded secrets were found in public GitHub commits.
How does AI contribute to these leaks?
AI-assisted commits are leaking secrets at twice the baseline rate, increasing the risk of exposure.
What should organizations do to mitigate risks?
Organizations should establish clear reporting channels for external parties to disclose exposed credentials.