LEAKING SECRETS IN THE AGE OF AI

Summary from the TLDR InfoSec newsletter

Researchers found that AI-related secrets dominate public code repository leaks, comprising 4 of the top 5 vulnerable secret types. The three main sources are Python notebook files, AI agent config files, and new AI vendor secret types that scanners overlook. Valid secrets from more than 30 companies, including Fortune 100 firms, were found, highlighting poor AI development security practices.