Secrets Management

Secrets management encompasses tools and practices for securely storing, rotating, and controlling access to sensitive credentials like API keys, passwords, and encryption keys. In enterprise AI governance, it prevents unauthorized access to critical AI systems and data by ensuring sensitive authentication materials are never hardcoded or exposed in source code or logs. Proper secrets management is essential for compliance with regulations like SOC 2, HIPAA, and PCI-DSS, and it reduces the risk of data breaches that could compromise AI model integrity or training datasets.

1 item

EnforcementGlobal2026-09-08

GitSpawn Hits Seven AI Coding Agents, Exposing Repository Trust as a Systemic Control Gap

Check Point Research has disclosed GitSpawn, a vulnerability class affecting seven AI coding agents including Claude Code, Codex, Cursor, Goose, Qwen Code, Grok Build, and Hermes. The vulnerability exploits how agents process instructions embedded in version control repositories, creating a pathway for secrets exfiltration and prompt injection at the repository layer. The same threat intelligence cycle also documents active exploitation of SonicWall and JFrog products, signaling coordinated attacker interest in AI toolchain and adjacent infrastructure.

GitSpawn Claude Code Codex Cursor Qwen Code Grok Build agentic AI prompt injection secrets management Check Point Research