HomeAI · summaries
Storia in 8 fonti
CISA Exposes Secrets, Credentials in 'Private' Repo
The agency's GitHub repository, publicly available since November 2025, was ironically named "Private-CISA."
Confronto fonti
6 prospettive sulla stessa storiaTimeline cronologica
- ·
ilsoftware.it
Incidente colossale: fuga di chiavi digitali colpisce CISA, agenzia cybersecurity
Credenziali GovCloud e password in chiaro: il caso CISA mostra i rischi colossali dei segreti esposti su GitHub.
- ·
techcrunch.com
US cyber agency CISA exposed reams of passwords and cloud keys to the open web | TechCrunch
The federal cybersecurity agency left plaintext passwords in a spreadsheet uploaded to a public GitHub repository, per a report by independent journalist Brian Krebs.
- ·
cryptobriefing.com
CISA exposed plaintext passwords and cloud keys on GitHub for six months
CISA left plaintext passwords and AWS GovCloud admin keys in a public GitHub repo for six months. GitGuardian discovered the 844 MB exposure on May 14, 2026.
- ·
theregister.com
America's top cyber-defense agency left a GitHub repo open with passwords, keys, tokens – and incredibly obvious filenames
I wonder what's in 'external-secret-repo-creds.yaml' and 'AWS-Workspace-Firefox-Passwords.csv'?
- ·
America's top cyber-defense agency left a GitHub repo open with with passwords, keys, tokens – and incredibly obvious filenames
I wonder what's in 'external-secret-repo-creds.yaml' and 'AWS-Workspace-Firefox-Passwords.csv'?
- ·
arstechnica.com
Secret CISA credentials found in public GitHub repo
SSH keys, plaintext passwords, other sensitive data had been up since November 2025.
- ·
darkreading.com
CISA Exposes Secrets, Credentials in 'Private' Repo
The agency's GitHub repository, publicly available since November 2025, was ironically named "Private-CISA."
- ·
dev.to
How We Got a CISA GitHub Leak Taken Down in Under a Day
On May 14, 2026, GitGuardian found what looked like leaked CISA secrets in a public GitHub repository...
- ·
schneier.com
CISA Security Leak - Schneier on Security
Crazy story: Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to…