Wiz finds widespread secret leaks in AI firms.

Wiz analyzed GitHub repositories tied to major AI companies and discovered that 65% had leaked verified secrets, including API keys and credentials. The leaks, some linked to Google API and Hugging Face, could expose private models and training data. While firms like ElevenLabs and Langchain responded quickly, nearly half of disclosures received no reply. Wiz urged companies to adopt stronger secret management practices, including mandatory scanning and clear disclosure channels.

Read more:

https://www.securityweek.com/many-forbes-ai-50-companies-leak-secrets-on-github/