Tag: OAuth tokens
GitHub Gives Enterprises a Full Count of Who Holds the Keys
Tom Smith | | access management, agentic AI, AI coding agents, credential inventory, credential security, Developer Security, devsecops, github, GitHub Apps, GitHub Enterprise Cloud, identity security, least-privilege, OAuth tokens, PATs, Personal Access Tokens, secrets management, security operations, Software Supply Chain Security, SSH keysGitHub Enterprise Cloud now lets organizations export a full inventory of credentials, helping security teams identify stale, overprivileged and forgotten access across users, apps and automation ...
TeamPCP Supply Chain Attack Leads to CrowdSec Source Code Being Stolen
Jeff Burt | | CrowdSec, EDR, github, Mini Shai-Hulud, NPM security, OAuth tokens, supply chain attacks, TanStack compromise, TeamPCPCrowdSec says attackers stole source code from about 170 private GitHub repositories after a TanStack npm supply chain attack exposed an OAuth token tied to a former employee ...
The Trust Graph: Why Infrastructure Diagrams No Longer Describe Modern Systems
Igboanugo David Ugochukwu | | AI agent security, CI/CD security, GitHub Actions security, IAM governance, identity security, machine identities, non-human identities, OAuth tokens, OIDC federation, platform engineering, reliability engineering, SaaS integrations, secrets sprawl, service accounts, Software Supply Chain, trust amplification, trust bottlenecks, trust cascades, trust graph, workload identityTraditional architecture diagrams miss the identity relationships that now drive breaches and outages. Platform teams need trust graphs that map who and what can act across modern systems ...
