$48M in crypto was stolen after a wallet seed was exposed by a Korean tax agency — one secret leaked, millions lost. Key management is everything. 🔑💸 #CryptoSecurity #SecretManagement

https://www.bleepingcomputer.com/news/security/48m-in-crypto-stolen-after-korean-tax-agency-exposes-wallet-seed/

"Khám phá CruxVault - Công cụ quản lý bí mật Git-like đầu tiên trên máy cục bộ!
- Mã hóa bí mật cục bộ
- Lưu trữ bí mật với kiểm soát phiên bản
- CLI giống Git (crux init, crux commit, crux status)
- Thẻ môi trường (dev/staging/prod)
Hoàn toàn ngoại tuyến, không phụ thuộc vào cloud!
#CruxVault #SecretManagement #LocalFirst #GitLike #DevTool #CôngCụLậpTrình #QuảnLýBíMật"

https://www.reddit.com/r/SideProject/comments/1oq7tgt/built_cruxvault_localfirst_gitlike_secret/

This is why you should not hard-code credentials in your source code, but use env. vars or credential managers.

Looks like someone sent me a mail via a python script. The script had an issue which let the mail content to be the script itself, which contains a token.

(Or this is phishing wanting me to try the token)

#development #secretmanagement #security

I released params2env, a Go based CLI tool I've built that reads AWS SSM Parameter Store values and sets them as environment variables.

The tool can create, modify, and delete parameters, and supports optional cross-region replication for redundancy.

Read more on my blog: https://dominik.wombacher.cc/posts/params2env-aws-ssm-parameter-store-to-environment-variables.html

#AWS #Go #GoLang #CLI #OpenSource #ParameterStore #DevOps #SecretManagement

OH: Moment, ich gibt dir die API-Keys aus dem Production Pod zum Testen.

#cloud #secretmanagement #APIKeys #javadevelopment

"The 18-point secrets management checklist"

https://www.hashicorp.com/en/blog/the-18-point-secrets-management-checklist

#security #cybersecurity #secrets #secretmanagement

....aaaaaand #OpenBao (the fork of #Hashicorp #Vault) is on its way to @opensuse #Tumbleweed in the latest version 2.2.1. Since 2.2.0 the webui is included in OpenBao, so this can be a full replacement for Vault!

Looking forward to doing more testing with it!

In case you want to try it out, here is a #vagrant #libvirt setup using #Ansible to prepare an OpenBao server VM and a client using a secret.
https://codeberg.org/johanneskastl/openbao_vagrant_libvirt_ansible

#secretmanagement #kms #devops

GitHub is shaking up code security after 39 million secrets leaked—now every team can access standalone tools backed by AI and major cloud partners. Curious how this could reshape digital protection?

https://thedefendopsdiaries.com/githubs-security-tools-expansion-a-new-era-in-software-protection/

#githubsecurity
#softwareprotection
#secretmanagement
#cybersecuritytools
#infosec