Thousands of sensitive secrets published on JSONFormatter and CodeBeautify

This title could be clearer and more informative.Try out Clickbait Shieldfor free (5 uses left this month).

WatchTowr researchers discovered over 80,000 leaked sensitive secrets on JSONFormatter and CodeBeautify platforms, including passwords, API keys, cloud credentials, and private keys from government, finance, healthcare, and telecom organizations. Users unknowingly exposed data through predictable public URLs when using "Save" features. Despite months of warnings to organizations, the leaks persist, with evidence showing attackers already scraping these platforms. The research highlights critical security negligence in how developers handle sensitive information on public code-formatting tools.

3m read timeFrom securityaffairs.com
Post cover image
Table of contents
Thousands of sensitive secrets published on JSONFormatter and CodeBeautifyUsers of JSONFormatter and CodeBeautify leaked thousands of sensitive secrets, including credentials and private keys, WatchTowr warns.
4 Comments

Sort: