Avatar photo
Mackenzie Jackson
GitGuardian Blog - Automated Secrets Detection
Mackenzie Jackson is the Security Researcher & Advocate, Aikido As a security researcher and advocate at Aikido, Mackenzie spends his days translating security jargon into human speak and convincing developers that they can care about security without sacrificing their will to live. He loves creating and advocating for security tools that easily integrate into the development process, focusing on reducing alert fatigue and improving the overall developer experience in security implementations. Before joining Aikido, Mackenzie served as a developer advocate at GitGuardian for more than four years and co-founded and acted as chief technology officer (CTO) for Conpago, a technology company focused on combating social isolation among the elderly through innovative communication devices. Mackenzie is the host of The Security Repopodcast, where he explores emerging tech topics in cybersecurity and interviews other experts. In his personal time he brings cybersecurity stories to life in The Red Team Chronicles comic series. Mackenzie also regularly speaks at tech conferences like DevOxx, DefCon, NDC and BlackAlps.

Crappy code, crappy Copilot. GitHub Copilot is writing vulnerable code and it could be your fault

Crappy code, crappy Copilot. GitHub Copilot is writing vulnerable code and it could be your fault

| | Conferences
The promise of AI code assistance like Copilot was an exciting promise when released. But they might not be the answer to all your problems. A research study has now found that while Copilot frequently introduces vulnerabilities, it may in fact be influenced by the input. Poor code, poor outcome ... Read More
GitGuardian Blog - Automated Secrets Detection
Black Hat 25 – What you need to know

Black Hat 25 – What you need to know

| | Conferences
Missed out on Black Hat 2022 briefings or got stuck in the business hall? We have you covered ... Read More
GitGuardian Blog - Automated Secrets Detection
Detect secrets with a pre-commit git hook using ggshield and the pre-commit framework

Securing your SDLC (Software Development Life Cycle)

| | Best Practices
In this post, we are going to break down the SDLC and look at how we can add security at each stage with helpful resources ... Read More
GitGuardian Blog - Automated Secrets Detection
Detect secrets with a pre-commit git hook using ggshield and the pre-commit framework

Securing your SDLC (Software Development Life Cycle)

|
Building security into our applications is widely considered to be an important priority in mature companies. But even still it is often overlooked at earlier stages of the development making the cost of security exponentially higher the later in the process we start to consider it. In this post, we ... Read More
GitGuardian Blog - Automated Secrets Detection
How Hackers Used Stolen GitHub Tokens to Access Private Source Code

How Hackers Used Stolen GitHub Tokens to Access Private Source Code

| | Breach explained
Attackers have used stolen OAuth tokens issued to Travis CI and Heroku to gain access to private git repositories on GitHub. Here we take a look at exactly what happened, why it's significant, and how to mitigate the issue ... Read More
GitGuardian Blog - Automated Secrets Detection
Latest from Lapsus$, Reviewing the Microsoft Breach

Latest from Lapsus$, Reviewing the Microsoft Breach

| | Breach explained
Lapsus$ has continued its prolific pace of breaches now leaking internal source code from 250 Microsoft projects. GitGuardian analyzed the code looking for secrets sprawl ... Read More
GitGuardian Blog - Automated Secrets Detection
credentials EUAC CUI classified secrets SMB

Secrets Detection: An Emerging AppSec Category

| | Cybersecurity, repository manager, Secrets, Software Development
Applications are no longer standalone monoliths, they now rely on thousands of independent building blocks: cloud infrastructure, databases, SaaS components such as Stripe, Slack and HubSpot, just to name a few. This is a significant shift in software development. Secrets are the glue that connects these different application building blocks ... Read More
Security Boulevard