DOGE Denizen Marko Elez Leaked API Key for x AI
Summary: Marko Elez, a 25-year-old DOGE employee with access to sensitive databases at the Social Security Administration, Treasury, Justice and Homeland Security, committed a GitHub script called "agent.py" on July 13 that included a private xAI API key, first flagged by GitGuardian. Security consultant Philippe Caturegli said the key allowed access to at least 52 xAI LLMs, and while the repository was removed after he emailed Elez, the key still works and has not been revoked.
Why it matters: The same key type was leaked on GitHub by another DOGE employee for two months in May, and Caturegli's point is that repetition, not bad luck, signals a broken security culture - in someone now holding access to federal immigration, Treasury and law enforcement systems.
Read the original at Krebs on Security ↗
- Topics
- AI Security
- Related
- SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 8 Cyber Risks · Nov 15, 2026Pentagon Renames CDAO ‘Super Intelligence Office’ Cyber Risks · Nov 15, 2026186 Fake AI Domains Redirect Users to Click Fix Lures, Browser Malware, and Search Hijackers Cyber Risks · Nov 12, 2026