Secrets in Docker Images: How Credentials Survive Layers
Credentials can survive in image layers, metadata, and build logs. Learn how to find them, remove them safely, and build without baking them in.
Secrets Management
3 articles
1.8 Million Android Apps Scanned for Secrets: Treat Every APK as Public
Anthropic says a suspected ShinyHunters affiliate scanned 1.8 million Android APKs for hardcoded secrets. The defensive lesson is architectural: anything shipped to a phone must be treated as recoverable.
GitLab CVE-2026-85706: Patch the File Read, Then Rotate What It Exposed
CISA lists GitLab CVE-2026-85706 as exploited. Self-managed administrators must upgrade to 19.3.2, 19.2.6, or 19.1.8 or later, hunt the repository commits API, and treat readable secrets as potentially compromised.