How to Scan Force Pushed Commits for Secrets(trufflesecurity.com)

11 points by mmcclure 1 year ago | 1 comments

I found a backdoor into my bed(trufflesecurity.com)

855 points by riverdroid 1 year ago | 345 comments

Truffle Security blog post describing a backdoor found in the Eight Sleep smart bed that allowed remote access, and how the authors removed it.

GCP CloudQuarry: Searching for Secrets in Public GCP Images(trufflesecurity.com)

14 points by mooreds 1 year ago | 0 comments

GitLab scan finds 17,000 secrets in public repos, leading to $9000+ in bounties(trufflesecurity.com)

12 points by adrianwaj 11 months ago | 4 comments

Scanning 7.6 Petabytes of HuggingFace Training Data for Secrets(trufflesecurity.com)

31 points by 882542F3884314B 2 months ago | 8 comments

Anyone can access deleted and private repository data on GitHub(trufflesecurity.com)

1823 points by __0x1__ 2 years ago | 341 comments

Truffle Security blog post explaining how data from deleted forks, deleted repositories, and private repositories on GitHub can remain accessible to anyone.