A command in Claude Code inadvertently saves files with credentials and other sensitive data to public Git repositories, creating security gaps for organizations.
AI Coding Agents Leak Thousands of Secrets to GitHub
About this summary. This is a short excerpt from the description that Dark Reading published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.darkreading.com/cyber-risk/ai-coding-agents-leak-secrets-github
Source attribution: headline and facts are from Dark Reading (darkreading.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Claude Code settings files expose thousands of secrets on GitHub
Claude Code is leaking sensitive information on public GitHub instances thanks to a partial oversight in the way its settings files are handled. That's the finding of AI…
Hide your slop PR descriptions behind
Most of the changes I make to my projects these days come in the form of PRs opened for me by Claude Code or Codex. The PR is my unit of work - I use them to bundle…
Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. When a…
Monitoring AI agent sessions: Leveraging embedding models to aid threat hunting and attack discovery workflows
Query rules find behavior you can define, but agent sessions contain unstructured behaviors you can only describe. I stored six months of my own Claude Code and Cursor…
Qwen 3.8 27B on my laptop can interpret model weights, too
Yesterday's hot paper was Sparks of Weight-Space Programming: LLMs can natively read & write neural network weights by Rikiya Takehi, Jayden Teoh, Alex Zhang, and Omar…
AI coding agents are installing MCP servers that will never be patched
When a developer tells an AI coding agent to “set up a GitHub MCP,” the agent has to pick a package. New research from Glow Labs documents sessions where it picked one…