Passwords were stored as plain text in a public GitHub repository.
Credenziali GovCloud e password in chiaro: il caso CISA mostra i rischi colossali dei segreti esposti su GitHub.
The federal cybersecurity agency left plaintext passwords in a spreadsheet uploaded to a public GitHub repository, per a report by independent journalist Brian Krebs.
I wonder what's in 'external-secret-repo-creds.yaml' and 'AWS-Workspace-Firefox-Passwords.csv'?
SSH keys, plaintext passwords, other sensitive data had been up since November 2025.
On May 14, 2026, GitGuardian found what looked like leaked CISA secrets in a public GitHub repository...