26,400 live cloud and AI keys found in public Gitee repositories, led by Alibaba Cloud, DeepSeek and OpenAI ยท updates https://pwn.watch/i/gitee-26400-live-credentials-public-repos-oct-2026 A researcher scanned 7.25 million public repositories on Gitee, China's largest Git host, and found 26,400 unique credentials that still worked: 9,473 Alibaba Cloud AccessKey pairs, 3,805 YouTube API keys, 3,170 DeepSeek keys, 1,489 Zhipu BigModel keys, 1,348 OpenAI keys and more, including an organization-admin key for an unnamed enterprise AI platform. Gitee has no public secret-scanning partnerships with vendors, and no revocations were confirmed at publication. Anyone who ever pushed a key to a public Gitee repo should treat it as exposed and revoke it. en Thu, 29 Oct 2026 00:00:00 GMT 26,400 live cloud and AI keys found in public Gitee repositories, led by Alibaba Cloud, DeepSeek and OpenAI: The Hacker News reports the breakdown: 9,473 Alibaba Cloud AccessKey pairs, 3,805 YouTube API keys, 3,170 DeepSeek keys, 1,489 Zhipu BigModel keys and 1,348 OpenAI keys, plus smaller numbers for GitHub, AWS, Google Cloud and Gemini. Nearly half (12,242) came from 2025 commits. Zimmermann sent lists to the vendors with the most exposed keys but did not contact the developers, and had not confirmed any revocations when he published. https://pwn.watch/i/gitee-26400-live-credentials-public-repos-oct-2026 https://pwn.watch/i/gitee-26400-live-credentials-public-repos-oct-2026#2026-10-29-373fef17 Thu, 29 Oct 2026 00:00:00 GMT medium <p><a href="https://thehackernews.com/2026/10/26400-valid-cloud-and-ai-credentials.html">Source</a></p> 26,400 live cloud and AI keys found in public Gitee repositories, led by Alibaba Cloud, DeepSeek and OpenAI: Independent researcher Ben Zimmermann publishes a month-long scan of 7,256,531 public Gitee repositories with TruffleHog and Kingfisher: 26,400 unique credentials still authenticated at scan time, including an active organization-admin credential for an unnamed enterprise AI platform. Gitee had a higher rate (3.64 per 1,000 repos) than comparable scans of GitLab (3.11) and Bitbucket (2.39). https://pwn.watch/i/gitee-26400-live-credentials-public-repos-oct-2026 https://pwn.watch/i/gitee-26400-live-credentials-public-repos-oct-2026#2026-10-28-504ffb3a Wed, 28 Oct 2026 00:00:00 GMT medium <p><a href="https://www.mongodb.com/company/blog/technical/scanning-7-point-25-million-public-repositories-chinas-largest-git-platform-for-secrets">Source</a></p>