Thousands of Corporate Secrets Were Left Exposed. This Guy Found Them All

A researcher discovered widespread accidental exposure of secrets (passwords, API tokens, encryption keys, TLS certificates) affecting thousands of organizations and identified roughly 66,000 websites with dangling subdomain vulnerabilities that could enable hijacking; the researcher also automated revocation to mitigate some risks. The work emphasizes large-scale scanning of unconventional datasets to find trivial but widespread vulnerability classes and highlights the potential for significant unauthorized access and supply-chain impacts, though no active exploitation is reported in the text.