API Key Security

Best practices and cautionary tales around securing API keys and credentials, including risks of exposure, theft, and unauthorized usage.

Reading List

Agentic Systems

Agent Vault: Secure Sandboxing and Secret Injection for AI Agents

Apr 24, 2026135

Agent Vault is a secure execution environment for AI agents that prevents data leaks through network sandboxing and automated secret injection.

AI Agents Sandboxing Containerization API Key Security Cybersecurity

Damage Control

Bitwarden CLI Compromised in CI/CD Supply Chain Attack

Apr 23, 2026865

Bitwarden CLI version 2026.4.0 was compromised in a supply chain attack that uses a malicious CI/CD injection to harvest cloud and developer credentials.

Supply Chain Security CI/CD Malware GitHub Actions API Key Security

Damage Control

The Vercel Breach: OAuth Vulnerabilities and the Risk of Insecure Secret Defaults

Apr 21, 2026368

A long-term breach at Vercel exploited a third-party OAuth trust and insecure default settings to expose customer secrets at a platform scale.

Supply Chain Security API Key Security Cybersecurity OAuth Security CI/CD

Damage Control

Vercel Discloses April 2026 Internal Security Incident

Apr 19, 2026866

Vercel is responding to a security breach of its internal systems that affected a small group of customers while maintaining full service operations.

Cybersecurity Incident Response Cloud Infrastructure API Key Security

Damage Control

Gas Town Accused of Unauthorized Use of User AI Credits for Project Maintenance

Apr 15, 2026252

Gas Town is accused of 'stealing' user LLM credits and GitHub identities to automatically fund and perform its own software maintenance.

AI Agents Digital Autonomy Open Source Self-Modifying AI API Key Security

Damage Control

Critical Supply Chain Attack: Malicious Credential Stealer Found in litellm PyPI Package

Mar 24, 2026931

The litellm PyPI package has been compromised by a supply chain attack that automatically steals and exfiltrates sensitive system credentials and secrets.

Supply Chain Security Cybersecurity Package Management API Key Security