News
Truffle Security launches program to revoke 1.4 million live secrets
First reported bleepingcomputer.com
Page published
Earliest dated coverage: 5 Nov 2026 · First observed: 5 Nov 2026 · Latest dated coverage: 5 Nov 2026
Coverage timeline
Single-source incident — one report is available.
Why it matters
Truffle Security’s findings highlight live credential exposure in AI coding-tool configurations and the need to pair leak detection with reliable revocation.
Truffle Security launched a free Secrets Revocation Program to help API key issuers revoke 1.4 million publicly exposed, still-valid secrets. Although the initiative addresses credential leaks broadly, the company reports finding 2,655 working keys in AI coding-tool configuration files since January 2025.