Credentials in collaboration tools

Thousands of credentials survived five years of pentests inside Jira ticket comments

Stratus Security's CTO says the scanner his firm wrote for its own engagements pulled them out of one client's backlog, and the previous tester missed them because ticket comments are not in anyone's standard methodology.