Thousands of Git repos leak cloud keys, putting millions at risk

OVER 28,000 Git repositories have been discovered exposed on public servers, affecting 3.5 million hosts. These repositories risk data theft and cloud infrastructure takeover by leaking sensitive data like AWS keys and Stripe secrets due to misconfigured .git directories. Key findings include over 400 AWS access keys, 107 Stripe secrets, and various other credentials exposed. Security teams are advised to immediately audit their servers, block public access to .git directories, and rotate any accessed credentials. The issue highlights a prevalent vulnerability in cloud security, necessitating stricter deployment checks.