AML.T0055

MITRE ATLAS / Unsecured Credentials

Adversaries search compromised systems for credentials stored without protection, including keys in notebooks, tokens in environment files, and secrets committed to source control.

Think of it likeFinding the spare key under the mat because somebody decided the lock was inconvenient.

In plain English

AI work leaves credentials lying around: API keys pasted into notebooks, tokens in config files, secrets in a repo history. Searching for them is faster than stealing them.