Digital Shadows launches access key alerts - to mitigate the growing problem of credentials exposed during software development
Thursday, October 8, 2020
Threat actors actively scouring code repositories such as GitHub for easy way to infiltrate organizations
LONDON and SAN FRANCISCO, Oct. 7, 2020 /PRNewswire/ -- Digital Shadows, the leader in digital risk protection, has today announced the ability to detect exposed access keys. A combination of misconfiguration, inexperience, and laziness means that software developers are exposing access keys at an alarming rate. With threat actors routinely scouring code repositories for leaked keys, security teams need a fast, scalable solution to monitor these sites for their exposed technical assets.
Customers of Digital Shadows will now be able to identify in near real-time where these keys have been exposed. Most leakage is accidental, due to poor security practices - such as sensitive data being committed to public repositories, rather than private ones. SearchLight users will be notified when an access key has been detected on a public code repository or paste site, complete with a risk score for prioritization, source file, and matched assets. This means that remediation is quick and simple: either revoke the credential or tweak the configuration settings.
Russell Bentley, VP of Product at Digital Shadows, comments: "As software development has become increasingly distributed between in-house and outsourced teams it has become increasingly challenging to monitor the exposure of sensitive information. Every day, sensitive technical information like keys and secrets are exposed online to code collaboration platforms. Normally this is accidental, but we have seen evidence that threat actors are scouring public repositories and looking to use it in order to access sensitive data and infiltrate organizations. This new functionality within SearchLight will make it quick and simple to stop attackers in their tracks."
SearchLight's new access key alerting helps organizations monitor for access keys and secret exposure, providing Digital Shadows customers with complete visibility and minimal effort. This includes the ability to:
-- Identify near real-time who has exposed technical data: Each alert is
tailored to an organization and built-in configuration minimizes false
positives and increases relevance.
-- Built-in 'playbooks' enable organizations to learn how to reduce
exposure and remediate risks
-- Comprehensive coverage, for increased visibility: Automated detection of
access keys across the broadest set of sources.
-- Build a clear picture with enriched data: As Shadow Search is built-in
to the alert, users can have a succinct view of the historical activity
related to that alert, building a richer picture, and helping security
teams to make decisions quicker.
ABOUT DIGITAL SHADOWS
Digital Shadows minimizes digital risk by identifying unwanted exposure and protecting against external threats. Organizations can suffer regulatory fines, loss of intellectual property, and reputational damage when digital risk is left unmanaged. Digital Shadows SearchLight(TM) helps you minimize these risks by detecting data loss, securing your online brand, and reducing your attack surface. To learn more, visit www.digitalshadows.com.
Dex Polizzi
Lumina Communications
646-741-8358
ds@luminapr.com
View original content:http://www.prnewswire.com/news-releases/digital-shadows-launches-access-key-alerts--to-mitigate-the-growing-problem-of-credentials-exposed-during-software-development-301147493.html
SOURCE Digital Shadows
|
|
|
|
|
 |
Asetek - Mandatory Notification of Trade | Jan 22, 2026
|
|
Tomorrowland Brings the Magic to Shanghai for a Spectacular First Indoor Edition in China | Jan 22, 2026
|
|
BC.GAME to Host "Stay Untamed" Night During Abu Dhabi's Packed Web3 Summit Week | Jan 22, 2026
|
|
Rent Manager Earned Best Real Estate Software Product Award and Multiple Review Badges from G2 Platform | Jan 22, 2026
|
|
Auburn University's Applied Research Institute Expands Advanced Manufacturing Capabilities with CF3D Enterprise Cell | Jan 22, 2026
|
|
California Divorce Mediation Center Unveils Modern Website Redesign | Jan 22, 2026
|
|
AMPERA ANNOUNCES LOCATION FOR GLOBAL HEADQUARTERS | Jan 22, 2026
|
|
Immutable Announces First Co-Founder-Hosted Live Webinar: How to Dominate Your Steam Launch | Jan 22, 2026
|
|
Gemmy Alerts Customers: Fake Websites Target Holiday Decorators | Jan 22, 2026
|
|
Culture and tourism sectors thrive in Xiamen | Jan 22, 2026
|
|
|
