Nx Package Supply Chain Attack: In-Depth Analysis of a Global Security Crisis Starting from GitHub Actions Vulnerability
Article
August 28, 2025
News
Latest Updates
Explore the latest updates in NHI security, including recent enhancements to our platform, insightful research, and news on managing non-human identity risks
The 2025 Cybersecurity Landscape: Download the Full Report
Announcement
May 29, 2025
A Study on Secret Exposure Cases within Vercel Environment Frontend Code: AWS, Stripe, Github Keys Were Exposed
Article
April 27, 2025
OWASP NHI5:2025 - Overprivileged NHI In-Depth Analysis and Management
Article
April 25, 2025
Beyond Lifecycle Management: Why Continuous Secret Detection is Non-Negotiable for NHI Security
Article
April 23, 2025
OWASP NHI4:2025 Insecure Authentication Deep Dive Introduction: The Era of Non-Human Identities Beyond Humans
Article
April 22, 2025
Secret Sprawl and Non-Human Identities: The Growing Security Challenge
Article
April 18, 2025
Navigating the Expanding AI Universe: Deepening Our Understanding of MCP, A2A, and the Imperative of Non-Human Identity Security
Article
April 16, 2025
Stop Secrets Sprawl: Shifting Left for Effective Secret Detection
Article
April 14, 2025
Hidden Dangers: Why Detecting Secrets in S3 Buckets is Critical
Article
April 14, 2025
OWASP NHI2:2025 Secret Leakage – Understanding and Mitigating the Risks
Article
April 4, 2025
Stop the Sprawl: Introducing Cremit’s AWS S3 Non-Human Identity Detection
Announcement
April 1, 2025
Human vs. Non-Human Identity: The Key Differentiators
Article
March 25, 2025
Wake-Up Call: tj-actions/changed-files Compromised NHIs
Article
March 18, 2025
OWASP NHI3:2025 - Vulnerable Third-Party NHI
Article
March 18, 2025
Build vs. Buy: Making the Right Choice for Secrets Detection
Article
March 18, 2025
Bybit Hack Analysis: Strengthening Crypto Exchange Security
Article
March 3, 2025
Rising Data Breach Costs: Secret Detection's Role
Article
February 25, 2025
OWASP NHI1:2025 Improper Offboarding- A Comprehensive Overview
Article
February 18, 2025
Behind the Code: Best Practices for Identifying Hidden Secrets
Article
February 18, 2025
Understanding the OWASP Non-Human Identities (NHI) Top 10 Threats
Article
February 4, 2025
Securing Your Software Pipeline: The Role of Secret Detection
Article
February 4, 2025
What Is Secret Detection? A Beginner’s Guide
Article
January 17, 2025
Full Version of Nebula – UI, New Features, and More!
Announcement
December 19, 2024
Unveiling Nebula: An Open-Source MA-ABE Secrets Vault
Announcement
December 5, 2024
Vigilant Ally: Helping Developers Secure GitHub Secrets
Announcement
December 3, 2024
Cremit Joins AWS SaaS Spotlight Program
Article
November 6, 2024
DevSecOps: Why start with Cremit
Article
April 28, 2024
Credential Leakage Risks Hiding in Frontend Code
Article
April 19, 2024
Introducing Probe! Cremit's New Detection Engine
Announcement
April 9, 2024
Customer Interview: Insights from ENlighten
Customer Story
February 26, 2024
6 Essential Practices for Protecting Non-Human Identities
Article
February 25, 2024
Microsoft Secrets Leak: A Cybersecurity Wake-Up Call
Article
October 22, 2023
Featured
Fresh Posts for Smarter NHI Security.
Stay informed on critical NHI security topics with expert insights, practical guidance, and timely updates from our latest posts.
Announcement
The 2025 Cybersecurity Landscape: Download the Full Report
2025 cyber threats are here. Get our report on ITDR, NHI security & DevSecOps defense. Download your free copy now!
May 29, 2025
2-minute read
Article
A Study on Secret Exposure Cases within Vercel Environment Frontend Code: AWS, Stripe, Github Keys Were Exposed
Research on Vercel environments finds critical secrets like AWS/Stripe keys exposed in frontend code. Learn risks, causes, and prevention.
April 27, 2025
15-minute read
Article
Nx Package Supply Chain Attack: In-Depth Analysis of a Global Security Crisis Starting from GitHub Actions Vulnerability
On August 26, 2025, malicious versions of the popular Nx monorepo tool, downloaded 4 million times per week, were published to NPM, resulting in mass theft of sensitive information from developers worldwide. This incident (GHSA-cxm3-wv7p-598c) demonstrated a sophisticated multi-layered attack system, starting from a GitHub Actions pull_request_target workflow vulnerability, leading to NPM token theft, malicious package distribution, and sophisticated data collection exploiting AI CLI tools.
August 28, 2025
12m
Article
OWASP NHI5:2025 - Overprivileged NHI In-Depth Analysis and Management
Deep dive into OWASP NHI5 Overprivileged NHIs & AI. Learn causes, risks, detection, and mitigation strategies like CIEM, PaC, and JIT access.
April 25, 2025
9-minute read
Article
Beyond Lifecycle Management: Why Continuous Secret Detection is Non-Negotiable for NHI Security
Traditional NHI controls like rotation aren't enough. Discover why proactive, continuous secret detection is essential for securing modern infrastructure.
April 23, 2025
5-minute read
Article
OWASP NHI4:2025 Insecure Authentication Deep Dive Introduction: The Era of Non-Human Identities Beyond Humans
Deep dive into OWASP NHI4: Insecure Authentication. Understand the risks of NHIs, key vulnerabilities, and how Zero Trust helps protect your systems.
April 22, 2025
8-minute read
Cut Through the Noise. Secure Your NHIs.
Say goodbye to endless logs. Get focused intelligence that lets you monitor, manage, and secure your non-human identities—fast.
Blog
Guides, Insights, and More.
Explore practical guides, expert insights, and other valuable resources focused on non-human identity security.
Announcement
The 2025 Cybersecurity Landscape: Download the Full Report
2025 cyber threats are here. Get our report on ITDR, NHI security & DevSecOps defense. Download your free copy now!
May 29, 2025
2-minute read
Article
A Study on Secret Exposure Cases within Vercel Environment Frontend Code: AWS, Stripe, Github Keys Were Exposed
Research on Vercel environments finds critical secrets like AWS/Stripe keys exposed in frontend code. Learn risks, causes, and prevention.
April 27, 2025
15-minute read
Article
Nx Package Supply Chain Attack: In-Depth Analysis of a Global Security Crisis Starting from GitHub Actions Vulnerability
On August 26, 2025, malicious versions of the popular Nx monorepo tool, downloaded 4 million times per week, were published to NPM, resulting in mass theft of sensitive information from developers worldwide. This incident (GHSA-cxm3-wv7p-598c) demonstrated a sophisticated multi-layered attack system, starting from a GitHub Actions pull_request_target workflow vulnerability, leading to NPM token theft, malicious package distribution, and sophisticated data collection exploiting AI CLI tools.
August 28, 2025
12m
Article
OWASP NHI5:2025 - Overprivileged NHI In-Depth Analysis and Management
Deep dive into OWASP NHI5 Overprivileged NHIs & AI. Learn causes, risks, detection, and mitigation strategies like CIEM, PaC, and JIT access.
April 25, 2025
9-minute read
Article
Beyond Lifecycle Management: Why Continuous Secret Detection is Non-Negotiable for NHI Security
Traditional NHI controls like rotation aren't enough. Discover why proactive, continuous secret detection is essential for securing modern infrastructure.
April 23, 2025
5-minute read
Article
OWASP NHI4:2025 Insecure Authentication Deep Dive Introduction: The Era of Non-Human Identities Beyond Humans
Deep dive into OWASP NHI4: Insecure Authentication. Understand the risks of NHIs, key vulnerabilities, and how Zero Trust helps protect your systems.
April 22, 2025
8-minute read
FAQ
We're Here to Help
We provide detailed documentation for the integration processes, and dedicated customer support to assist with integrations, troubleshooting, and remediation strategies on paid versions. For more information or to get started, visit our website or contact our support team.
Cremit provides an automated, SaaS-based detection solution that scans your code repositories for non-human identities (NHI) such as API keys, tokens, passwords, certificates, and others to help prevent data breaches and security incidents.
Vulnerable NHIs can expose your systems to unauthorized access, data leaks, and compliance violations. By using Cremit, you can continuously monitor and detect leaks early in the development cycle, reducing the risk of security breaches and ensuring your codebase remains secure.