Lucene search

K
threatpostJeffrey EspositoTHREATPOST:D1F46C540508F4D10EDE8E4B7624029F
HistoryMay 09, 2022 - 10:43 a.m.

Podcast: The State of the Secret Sprawl

2022-05-0910:43:12
Jeffrey Esposito
threatpost.com
22

Can I tell you a secret? Will you keep it between us?

You’ve probably said this or heard this when it comes to friends and family. However, do you also know that secret keeping, or lack thereof is one of the biggest issues that businesses face?

The recent _The State of Secrets Sprawl _from GitGuardian further defines the breadth of business secrets.

“A secret can be any sensitive data that we want to keep private. When discussing secrets in the context of software development, secrets generally refer to digital authentication credentials that grant access to services, systems and data. These are most commonly API keys, usernames and passwords, or security certificates. Secrets are what tie together different building blocks of a single application by creating a secure connection between each component. Secrets grant access to the most sensitive systems.”

In this podcast with Mackenzie Jackson, developer advocate at GitGuardian, we dive into the report and also the issues that corporations face with public leaks from groups like Lapsus$ and more, along with ways that developers can keep their code safe.

For the full report, click here.