Daniel Begimher

Dashboard: ai-keys-leaks.begimher.com Original post: begimher.com/2025/07/28/its…

I wrote this last year after AI Leak Watch found 189,600 potential AI API key matches on GitHub. Current snapshot: 435,608. Some are examples or revoked. Some are probably real. Either way, we still have a secrets hygiene problem.

Our paper on SIR-Bench is now on arXiv. 794 test cases built from 129 real incident patterns, replayed in live cloud environments. arxiv.org/abs/2604.12040…

Security AI benchmarks today measure what agents know, what they can attack, or whether they complete a workflow. We wanted to measure something else: whether agents discover novel evidence during an investigation - or just reach the right conclusion by restating the alert.

Security Agent という手もあるけど、CI にとりあえずこれを挟んどけばある程度は安心できるのでオススメよ github.com/awslabs/automa…

@amdadchronicles Talk link: youtu.be/ukqAqMVh9Vs?si…

That's a wrap on #AWSreInvent ☁️ Presented with @amdadchronicles on AppSec, showing how agentic AI can be the “easy button” for security - meeting developers where they are. Plus great chats about our new AI investigative agent in AWS Security Incident Response. Link in reply 👇

Excited to finally share what's been keeping me busy these past few months! Join me TODAY at 12:25 PT/3:25 ET on AWS OnAir where we'll dive deeper into the new investigative agent. twitch.tv/awsonair

#GlobalCitizenFestival2025 talks big on fighting poverty & saving the planet, yet insists on outdated printed tickets at their festival, causing needless waste and hassle. If sustainability matters, show it in every detail, not just on stage. @GlblCtzn

@cristian_le0 A bit disappointed from the progress. Feels like we are slowing down...

🚨 GPT-5 is here — but it might mark the end of the transformer scaling law for LLMs. It’s basically an all-in-one AI agent (think MoE): code, apps, games, reasoning, web access. Benchmark gains? Just +21 over Gemini-2.5 Pro on LMArena, and tied on multimodal vision.

🚨 Just published a new, comprehensive guide on securing your AWS build pipelines! 🚀 Learn best practices for defense-in-depth, least privilege, secure webhooks, and more. 🔒 Read it now: aws.amazon.com/blogs/security…

Last update for my book playlist sharing webapp. Vibe coded this over a weekend (claude code, repo on website) Added likes and profiles for further sharing Check it out, no sign in required to share your own list and makes previews optimized for X readjourney.link/profile/pepeal…

It's 2025 and we're still pushing API keys to GitHub. 🤯 I ran a scan for AI provider keys and found 189,600 potential leaks. The risk is getting bigger than just high API bills. I built a dashboard to track it and wrote about how we can fix it Read more: begimher.com/2025/07/28/its…

My blog is now available in 11 languages! 🎉 The first post offers career tips for engineers—check it out and share! begimher.com/2025/04/27/bui… #Engineering #CareerAdvice #Cybersecurity