600+ Laravel sites face RCE after 260k APP_KEYs leaked on GitHub
Researchers at GitGuardian unearthed more than 260,000 Laravel APP_KEYs exposed in public GitHub repos, enabling attackers to trigger remote code execution via deserialization. Over 600 live applications were confirmed vulnerable, highlighting the critical risk of secret leakage in widely used PHP frameworks.