500K Active Credentials Exposed on GitHub; 200K After Default Push Protection

A security researcher reports that approximately 500,000 active credentials are exposed on GitHub, with about 200,000 of these exposed after GitHub enabled push protections by default. The finding suggests that default protections are insufficient to prevent credential leakage, highlighting a persistent risk for organizations relying on GitHub. The exact scope and affected parties remain unclear, but the scale indicates a significant cybersecurity concern.