"tl;dr Postman, the popular API testing platform, hosts the largest collection of public APIs. Unfortunately, it’s become one of the largest public sources of leaked secrets. We estimate over 4,000 live credentials are currently leaking publicly on Postman for a variety of popular SaaS and cloud providers."
https://trufflesecurity.com/blog/postman-carries-lots-of-secrets
#security #api #postman #apikeys #cybersecurity
dethos / Gonçalo Valério
npub1c8…lvmv9
2024-04-27 12:17:25
Author Public Key
npub1c86s34sfthe0yx4dp2sevkz2njm5lqz0arscrkhjqhkdexn5kuqqtlvmv9Published at
2024-04-27 12:17:25Event JSON
{
"id": "8708e82ca8dd4044d6e2b5ed16941e4f423e9892d521cac398f236df63dc013b",
"pubkey": "c1f508d6095df2f21aad0aa196584a9cb74f804fe8e181daf205ecdc9a74b700",
"created_at": 1714220245,
"kind": 1,
"tags": [
[
"t",
"security"
],
[
"t",
"api"
],
[
"t",
"postman"
],
[
"t",
"apikeys"
],
[
"t",
"cybersecurity"
]
],
"content": "\"tl;dr Postman, the popular API testing platform, hosts the largest collection of public APIs. Unfortunately, it’s become one of the largest public sources of leaked secrets. We estimate over 4,000 live credentials are currently leaking publicly on Postman for a variety of popular SaaS and cloud providers.\"\n\nhttps://trufflesecurity.com/blog/postman-carries-lots-of-secrets\n\n#security #api #postman #apikeys #cybersecurity",
"sig": "b491232a8814da87a42fee1da4f7947ef1477b975092fabe2770843a154a18005200b10eac8c15eb54d6cd5bdd58414a4aedf439abb45fdb9fcf5e4d42873e39"
}