Researchers found over 28,000 publicly exposed Git repositories across 3.5 million active web servers, revealing live AWS keys, Stripe secrets, GitHub tokens, and sensitive internal records. The exposure was caused by misconfigured public .git directories, putting organizations at risk of cloud takeover, financial data theft, and access to internal systems. #IntruderResearch #gitreaper #AWS #Stripe #GitHub
Keypoints
- Over 28,000 exposed Git repositories were discovered on 3.5 million hosts.
- The repositories contained active AWS, Stripe, OpenAI, Telegram, and GitHub credentials.
- Some leaked keys exposed employee records, disciplinary files, and payment data.
- The exposure was caused by publicly accessible .git directories on web servers.
- Organizations should block .git access, rotate secrets, and enable automated secret scanning.
Read More: https://securityonline.info/exposed-git-repositories-leak-secrets/