buildConfirmed2 publishers GhostAction attackers used roughly 1,900 hijacked GitHub accounts to plant credential-stealing workflows in over 30,000 repos. No GitHub Actions flaw was involved, so defence means rotating exposed keys and reviewing who edits workflows.
Perspective Coverage
3 publishers
- Builder
- Builder 38%
- Operator
- Operator 52%
- Investor
- Investor 10%
Reality
- Evidence70
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence72
buildOne report1 publisher GhostAction's workflow pulls a repository's full git history to search old commits for keys, a dev.to author says
GhostAction's fake workflow sets fetch-depth: 0 and runs git log -p --all, so deleted secrets are in reach, a dev.to author reports. A credential removed from the current files is still in every earlier commit, so it has to be revoked at the provider.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence50
buildOne report1 publisher Rust's env!() macro wrote a desktop team's CI API keys into its release binaries
A year after moving its API keys from the repo to CI variables, a Rust and Tauri team found them in its release builds, a dev.to post says. The post says the keys, meant for transient CI use, now persist in every shipped release.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+25
- Incentives
- Not scored
- Confidence55
buildOne report1 publisher ZoomEye counts 29,265 HashiCorp Vault secret-store APIs answering from the public internet
ZoomEye's fingerprint query found 29,265 HashiCorp Vault management APIs answering from the public internet on 24 September 2026. A match proves only that an admin interface answers, so the useful check for each team is whether its own address is in the results.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+15
- Incentives55
- Confidence45
buildOne report1 publisher Rust's Miri fix leaves CI secrets sitting in GitHub Actions caches built before it
Rust's nightly of 22 September 2026 stops Miri copying environment variables into the target/ directories CI jobs cache. Caches saved earlier still hold any secret a Miri step saw, so teams have to delete them and rotate those credentials.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence55
Tuskira's open-source gateway takes MCP credentials off developer laptops and CI runners
Tuskira released AI Agent Gateway, a free open-source proxy that holds AI agents' tool credentials and checks every call against a profile. A stolen agent config then yields only a gateway key, and that key is limited only if the operator bound it to a profile.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence40
Keyorix ships a self-hosted, single-binary secrets manager that imports from Vault
Keyorix SL released an open-source secrets manager that runs as one binary on a company's own servers with no internet connection. Air-gapped and NIS2- or DORA-bound teams get a self-hosted option, described so far mainly by its maker.
Reality
- Evidence30
- Adoption
- Not scored
- Hype gap+15
- Incentives60
- Confidence35
buildOne report1 publisher Claude Code's Read deny rules let grep -r and CLAUDE.md imports reach denied files
Claude Code 2.1.285's Read deny rules let 4 of 11 file-reading routes reach the model in a developer's test, among them grep -r and CLAUDE.md @imports. The docs limit the rules to named paths and point anyone needing a hard block to the OS sandbox.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+15
- Incentives30
- Confidence60
OpenAI's Codex now builds a project's environment once and starts each cloud task from it, with task state recoverable for up to seven days. For a team rolling it out, the new job is deciding who may edit the shared setup and what it can reach.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+5
- Incentives45
- Confidence65
buildOne report1 publisher Four chained bugs let unauthenticated attackers seize OpenBao and Vault servers with Raft snapshot policies
OpenBao fixed a four-bug chain in 2.6.3 and 2.7.0 that lets unauthenticated attackers seize servers with a Raft snapshot policy set. A dev.to post says HashiCorp Vault has no fix yet, so Vault operators have to close network paths to the API themselves.
Reality
- Evidence22
- Adoption
- Not scored
- Hype gap+45
- Incentives
- Not scored
- Confidence25
buildOne report1 publisher Moving MCP secrets into a gateway leaves a hijacked agent holding only a per-run token
Agenthof, an Apache-2.0 Go gateway, holds MCP server credentials so a hijacked agent can steal only a revocable per-run token, a dev.to walkthrough shows. Every tool call crosses the gateway, so it can also refuse ungranted tools and log each call to a hash-chained ledger.
Reality
- Evidence35
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence40
buildConfirmed2 publishers A dev.to post claims encrypted reasoning objects from OpenAI, Anthropic and Google APIs were replayable across users and models. The disclosure is thin, but the storage habit it exposes is yours.
Reality
- Evidence66
- Adoption45
- Hype gap+20
- Incentives55
- Confidence60
Unit 42 worked a ransomware intrusion where the operator handed tactical execution to frontier AI agents, and the chain from a public API endpoint to stolen cloud AI keys closed inside a single working day with no zero-day.
Reality
- Evidence50
- Adoption20
- Hype gap+25
- Incentives60
- Confidence55
The VPN vendor detected the intrusion on August 31 and finished remediation five days later. It says production infrastructure and customer data were untouched, and has not said which credentials, binaries or configurations sat in the exposed environment.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+10
- Incentives60
- Confidence60
GitHub lets enterprise owners export every token that can reach their code
Enterprise Cloud owners can now pull owner, scope, expiry and last-use data for SSH keys, PATs and app tokens as a CSV. The export stops at credentials GitHub issued, so secrets pasted into repositories stay out of scope.
Reality
- Evidence58
- Adoption20
- Hype gap+5
- Incentives70
- Confidence62
buildOne report1 publisher An Obsidian vault pipeline re-validates JSON from a model stripped of write tools
Every 10 minutes an unattended job summarizes Claude Code and Codex logs into an Obsidian vault and pushes the commit, so the pipeline treats the summarizer's own JSON as text that may carry pasted keys or injected instructions.
Reality
- Evidence58
- Adoption6
- Hype gap+10
- Incentives20
- Confidence55
UiPath aims Cartographer at the weeks companies spend mapping their own processes
Discovery has been the manual step in automation projects. UiPath now sells a tool that does it and writes the workflow. Whether the map it produced was right shows up only after the thing is in production.
Reality
- Evidence32
- Adoption22
- Hype gap+38
- Incentives74
- Confidence52
Red Hat tells Ansible 2.7 upgraders to settle the deployment model before booking the window
Red Hat's own upgrade guide names six environment decisions and three ways to run Ansible Automation Platform 2.7. It says the job can take an afternoon or several weeks, and RPM-based 2.4 and 2.5 installs sit at the long end.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+12
- Incentives78
- Confidence60
buildOne report1 publisher Server-side apply moves ArgoCD's diff into the Kubernetes API server
ArgoCD now hands diff calculation to the API server and accepts OCI registries as first-class sources. The same write-up still calls Git the sole source of truth, so teams pulling charts from Harbor have to decide which system records intent.
Reality
- Evidence24
- Adoption30
- Hype gap+34
- Incentives
- Not scored
- Confidence35
buildOne report1 publisher A key in a test widget moved GoodBarber's secrecy decision into deterministic code
On July 22 a model wrote a forty-character API key into a page's JavaScript and declared the API not secret. GoodBarber now has the model state only how a key is sent and lets code default every key to secret.
Reality
- Evidence57
- Adoption20
- Hype gap+10
- Incentives55
- Confidence52