28% of secret incidents in 2025 came from outside the codebase. Only 4% of those were also in the code, meaning code scanning alone misses almost all of them.

GitGuardian now scans Jira and Confluence attachments: https://youtu.be/OsZtg394xio

My favorite takeaway from the #GCSI conference last week was "to be a successful leader, you must be 'nose in, fingers out.'"

I wrote a post about this fantastic CISO-focused event:

https://blog.gitguardian.com/gcsi-2026

Honored to be on the speaker lineup for KCD New York 2026! I’ll be discussing developer access and supply chain breaches.
It’s going to be a day full of learning and connection — hope to see you there.

➡️https://kcdnewyork.com

#KCDNewYork #Kubernetes #CloudNative

Next week I am going to be in Palo Alto, speaking at the San Francisco Secure Software and AppSec Summit 2026.

You do not want to miss this event!

https://www.clutchevents.co/events/san-francisco-appsec-devsecops-summit-2026?utm_source=GITGUARDIAN

While I can't think of a good reason to actually use Microsoft Edge, another reason emerged today in a long list of reasons not to.

https://www.darkreading.com/cyber-risk/microsoft-edge-passwords-enterprise-risk

AI hooks are maybe more valuable than Git hooks. (Add this to the list of things I did not expect to be saying out loud)

https://blog.gitguardian.com/local-guardrails-for-secrets-security/