Topic tag

credential-hygiene

2 articles tagged credential-hygiene. Browse the full archive or jump to all posts.

474 GitHub App Keys Still Work: The Inventory Nobody Can Produce

September 27, 2026 · 11 min read

474 GitHub App Keys Still Work: The Inventory Nobody Can Produce

GitGuardian pulled over 500,000 exposed RSA keys out of public sources and found 474 GitHub App private keys that still authenticated, against 440 distinct Apps. Forty-four had organisation admin. The fix is not a rotation sprint, it is the inventory you cannot currently produce.

Read more →
The Steam avatar that unmasked TeamPCP: what the AFP arrests teach you about identity hygiene

August 27, 2026 · 10 min read

The Steam avatar that unmasked TeamPCP: what the AFP arrests teach you about identity hygiene

The AFP arrested two alleged TeamPCP members in Western Australia. The forensic thread that got there was a single cat avatar reused across five platforms for a decade. Here is the chain, and the five controls Flare says you should steal.

Read more →