Truffle Security
A cybersecurity company focused on detecting leaked secrets and credentials. It provides open-source tools and commercial services for discovering sensitive information exposures within codebases and public platforms.
Timeline (last 90 days)
AI labs have been purchasing penetration testing data for model training over the past four years.
Truffle discovered an API key leaked on the internet that had administrator privileges for the Apache Foundation.
When Truffle collaborated with Hugging Face to clean up leaked credentials in the platform's training datasets, approximately 250,000 valid keys were found.
All Facts (3)
AI labs have been purchasing penetration testing data for model training over the past four years.
50%UnverifiedTruffle discovered an API key leaked on the internet that had administrator privileges for the Apache Foundation.
50%UnverifiedWhen Truffle collaborated with Hugging Face to clean up leaked credentials in the platform's training datasets, approximately 250,000 valid keys were found.
50%