Review
Open access
Sep 2026
Secrets That Survive Everything: Runtime Credential Exposure in Production Web Applications
Two exploitation chains in which Azure AD client credentials and APIM subscription keys from production JavaScript bundles enabled account takeover and mass data exposure are documented.
Hemanth Gorijala
· IEEE Access · 1 citation