Truffle Security revokes 1.4 million exposed API secrets

Truffle Security launched the Secrets Revocation Program, a free service enabling API key issuers to revoke 1.4 million publicly exposed secrets still in active use. The program addresses the risk of leaked credentials remaining valid and exploitable. Affected organizations can use the service to identify and invalidate their compromised credentials. API key holders should check if their secrets are on the list and rotate them immediately.