Devconf.cz 2023

Secrets like API keys, security certificates and other credentials are the crown jewels of organizations and provide access to the inner workings of your organization. But these secrets are sprawling through the internet at an alarming rate. A research project conducted throughout 2021 by GitGuardian uncovered 6 million leaked secrets publically on GitHub.com and also uncovered that nearly 5% of all docker images contain at least one plain text credential. This number has yet again increased in 2022 after findings from the (currently unreleased) 2023 report. This presentation breaks down the anatomy of recent breaches to explain how attackers find and exploit this massive problem to break into organizations and how we can prevent it.