ReversingLabs has added new secret detection capabilities to its software supply chain security (SSCS) tool to help developers prioritize remediation with context-based data on secrets.
In a development environment, secrets refer to digital authentication credentials used in software components including login credentials, API tokens, and encryption keys.
“We are using our knowledge of exposed secrets in the billions of files we’ve previously analyzed to provide that context,” said Tomislav Pericin, co-founder and chief software architect, ReversingLabs. “For example, commonly shared secrets used for testing open-source components that have been public for years are not secrets – so why tell developers to fix them.”
More Stories
Threat Actors Shift to JavaScript-Based Phishing Attacks
Cybercriminals are increasingly prioritizing script-based phishing techniques over one based on traditional malicious documents Read More
Cybersecurity Incident Affects Arkansas City Water Treatment Facility
Arkansas City’s water treatment facility faced a cyber incident on Sunday and has since switched to manual operations Read More
Warnings after new Valencia ransomware group strikes businesses and leaks data
A new ransomware operation has started to leak information it claims has been stolen from organisations it has compromised around...
New Octo2 Malware Variant Threatens Mobile Banking Security
Cybercriminals have been observed disguising Octo2 as legitimate apps like Google Chrome and NordVPN Read More
The AI Fix #17: Why AI is an AWFUL writer and LinkedIn’s outrageous land grab
In episode 17 of The AI Fix, our hosts meet the worst newsreaders in the world, Graham learns about Big...
14 Million Patients Impacted by US Healthcare Data Breaches in 2024
SonicWall found that data breaches caused by malware attacks on US healthcare organizations have affected 14 million people so far...