Dark Reading Confidential: Stop Secrets Creep Across Developer Platforms

This Dark Reading podcast transcript examines “secrets creep” — the growing problem of credentials, API keys and sensitive data leaking into code repositories, CI/CD pipelines and collaboration tools (GitHub, Slack, JIRA, online dev tools). Experts report millions of exposed secrets, documented incidents where leaked secrets enabled breaches or production outages, rapid attacker exploitation (honeytokens and leaked credentials used within minutes), and recommend a layered response: developer education, reducing friction to use secure vaults, pre-commit/IDE detectors, rotation and honeytokens, and coordinated disclosure (including CERT engagement).