Postman Workspaces Leak 30000 API Keys and Sensitive Tokens

CloudSEK researchers discovered over 30,000 publicly accessible Postman workspaces leaking sensitive information, including API keys and tokens. The leaks affected organizations across various industries, exposing them to potential data breaches and unauthorized access. To mitigate risks, organizations should use environment variables, rotate tokens, and adopt secret management tools.

*****
Written on