Attackers steal API keys from thousands of GitHub repositories

Cybercriminals compromised developer accounts to access 1835 GitHub repositories, stealing sensitive data including passwords and API keys. This incident highlights the risks of stolen credentials and the need for stringent access controls, such as multi-factor authentication and automated secret scanning, to prevent hardcoded credentials from falling into the wrong hands.