Stolen-Credential Attacker Turns to Langflow; Claude Code Approvals Leak Secrets to GitHub
Monday, November 9, 2026 · 9 min
VulnCheck says the IP address at the center of Microsoft's stolen-app-credential report also exploited a Langflow decoy to steal and decrypt stored AI keys, and Apiiro found thousands of secrets in Claude Code approval files pushed to public GitHub repositories. Plus breaches at Iris Ohyama's online store and SMBC Consumer Finance's loan-guarantee system.
Listen
Show notes
VulnCheck says the IP address at the center of Microsoft's stolen-app-credential report also exploited a Langflow decoy to steal and decrypt stored AI keys, and Apiiro found thousands of secrets in Claude Code approval files pushed to public GitHub repositories. Plus breaches at Iris Ohyama's online store and SMBC Consumer Finance's loan-guarantee system.
In this episode
- Same Attacker, Different Door: Our Canaries Caught Microsoft's Agentic AI Secret Hunter Exploiting Langflow | Blog | VulnCheck — VulnCheck
“When we checked VulnCheck Canaries, we found the same address had been hitting our infrastructure too, by another route. Instead of leaked GitHub secrets, it was exploiting Langflow to pull credentials straight off the box.”
- Claude Code's "Yes, and Don't Ask Again" Option Can Leak Passwords and API Keys to GitHub — Guru Baran
“Apiiro researchers found 2,539 distinct secrets across 1,994 public repositories, showing how a routine approval can turn private credentials into public data.”
- Iris Ohyama data cloud breach exposes info of 7.7 million customers — BleepingComputer
“While the company is still trying to determine the number of records exposed and how many people are impacted, it notes that the impact extends to up to 5.8 million registered members and former members, and 1.9 million non-members.”
- SMBC Consumer Finance breach exposes 320,118 bank loan customers — Cybersixt
“The company guarantees card loans for regional banks, shinkin banks and online banks, and supplies some of them with the web form customers use to apply. It says it detected the intrusion on Monday, November 2, cut off access to the guarantee system the same day, and found the…”