Claude Code command exposes credentials in public Git repositories

Dark Reading reports that a Claude Code command inadvertently saves files containing credentials and other sensitive information to public Git repositories. Separately, Cyber Security News reports that Microsoft identified attackers using ARTEX AI to find exposed secrets on GitHub, with one case progressing from a search to Azure Key Vault data access in five minutes.

Covered by 2 publishers within 33 hours of the first report.

• Dark Reading: AI Coding Agents Leak Thousands of Secrets to GitHub

Reporting2

CSN Cyber Security News Hackers Use ARTEX AI to Steal Azure Key Vault Secrets Just 5 Minutes After Scanning GitHub · Kavichselvan 5:04 AM

DR Dark Reading AI Coding Agents Leak Thousands of Secrets to GitHub · Elizabeth Montalbano 1:46 PM

Related

THN Microsoft researchers plant AI backdoors in fewer than 10 dormant neurons November 11

TRD Hackers use fake OpenAI, SpaceX, and Anthropic event invites in new phishing scam to steal Microsoft and Google accounts November 5

AH Anthropic expands Claude with spreadsheets, whiteboards and meeting tools November 10

UAI WellSaid connects AI voiceover production to chatbot assistants November 10

Topics AnthropicMicrosoft