Gitee scan found 26,400 live credentials across 7,256,531 public repositories

Image: Primary

Published Wednesday, October 28, 2026 · 2:01 PM EDT

Ben Zimmermann found 26,400 unique credentials that successfully authenticated during a scan of 7,256,531 public Gitee repositories, according to his guest post published by MongoDB. Subsequent revocation remained unconfirmed. TruffleHog and Kingfisher searched repository histories and checked credentials against vendor APIs. Either scanner alone would have caught only about half the credentials. The findings included an active organization-admin credential for a major enterprise AI platform and thousands of live cloud access keys. Zimmermann sent the vendors with the highest exposure volumes their affected credentials and repository metadata to help identify customers.

Sources

mongodb.com

Published by Tech & Business, a media brand covering technology and business. This story was sourced from mongodb.com and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Security

Daishin cyberattack exposes 38,490 customers' data as two other financial firms disclose incidents

Daishin Securities exposed personal information belonging to 38,490 customers in a cyberattack, TechCrunch reported, including names, email addresses and mobile phone numbers. Daishin has notified affected customers and is cooperating with authorities.

NVIDIA releases open-weight speech model for transcription and translation

NVIDIA released Nemotron 3.5 Transcribe, an open-weight speech model that combines transcription, speaker labeling, translation and answers to questions about recorded audio.

Capital Security

Upwind announces $400 million Series C at $3.8 billion valuation

Upwind Security announced a $400 million Series C led by Bessemer Venture Partners, valuing the cloud and AI security company at $3.8 billion. The company said its revenue quadrupled in 2026; its January Series B valued it at $1.5 billion.

AI Products

Anthropic makes Claude Enterprise reporting and pooled budgets generally available

Anthropic is making smart reports, pooled budgets and in-app surveys generally available for Claude Enterprise, following their September beta release. Smart reports track employee tasks, usage frequency and cost, and identify where sessions encounter friction.

Capital AI

Plato raises $16M to build simulated workplaces for AI agents

Plato said it raised a $16M Series A led by Nava Ventures, bringing its total funding to $19M. Gradient Ventures, Transpose Platform and Microsoft AI chief Mustafa Suleyman also joined the round.

Capital Products

Numeracle raises $28 million for business identity verification

Numeracle has raised $28 million from Edison Partners to expand its business verification services, the company told Crunchbase News.