Recent research by Truffle Security uncovered 11,908 live API keys and passwords in the Common Crawl dataset used for AI training, highlighting serious identity management issues. These secrets were mainly hardcoded in web page code rather than securely managed. The report noted the Mailchimp API keys as particularly vulnerable, with 1,500 found. This situation poses risks such as phishing and data theft. Experts emphasized that the growing complexity of technology infrastructure increases the likelihood of such exposures, suggesting a pressing need for improved management practices.
The discovery of almost 12,000 valid secrets in a popular AI training dataset underscores the industry's struggle with identity management, warning of potential security threats.
Researchers at Truffle Security unearthed 11,908 live secrets in the Common Crawl archive, highlighting security vulnerabilities in AI training datasets.
Collection
[
|
...
]