In what security analysts are calling one of the most egregious data exposures in recent federal history, a public GitHub repository maintained by a contractor for the Cybersecurity and Infrastructure Security Agency (CISA) has laid bare a treasure trove of sensitive credentials. For months, the repository, aptly named “Private-CISA,” functioned as an open door into…
In a staggering lapse of operational security, a government contractor for the Cybersecurity and Infrastructure Security Agency (CISA) inadvertently exposed a treasure trove of highly sensitive credentials and internal deployment configurations to the public internet. The data, hosted in a public GitHub repository aptly named “Private-CISA,” included administrative access keys to critical AWS GovCloud accounts,…
In an incident described by cybersecurity experts as one of the most egregious data exposures in recent federal history, a contractor working for the Cybersecurity & Infrastructure Security Agency (CISA) inadvertently published a trove of highly privileged credentials to a public GitHub repository. The breach, which remained active for months, laid bare the inner workings…
The Cybersecurity and Infrastructure Security Agency (CISA)—the very entity tasked with safeguarding the United States’ critical digital infrastructure—is currently embroiled in a high-stakes security crisis. Following a report by KrebsOnSecurity, it has been revealed that a CISA contractor inadvertently exposed highly sensitive administrative credentials, including AWS GovCloud access keys, on a public GitHub repository. This…
In an alarming incident that has sent shockwaves through the cybersecurity community, a public GitHub repository maintained by a contractor for the Cybersecurity and Infrastructure Security Agency (CISA) has been found to contain highly sensitive, privileged credentials for the agency’s internal systems. The repository, explicitly named “Private-CISA,” functioned as an open-access vault for cloud keys,…
