highVulnerabilities & Exploits
Vulnerability Intelligence Roundup: State-Sponsored Campaigns, Russian Toolkits, and the Secrets Sprawl Crisis
The secrets sprawl crisis intensified in 2025 with 29 million new hardcoded credentials discovered on GitHub, representing a 34% year-over-year increase. Meanwhile, Russian and Chinese threat actors continue sophisticated campaigns against government targets using custom toolkits and multi-stage malware deployments.
The Hacker News, SANS ISC
secrets-sprawlstate-sponsoredrussian-toolkit