CISA credential leak raises alarms, and Capitol Hill demands answers
CISA credential leak exposes AWS GovCloud and internal system access on GitHub; Congress demands answers.
A public GitHub repository maintained by contractor Nightwing exposed sensitive CISA credentials for privileged AWS GovCloud accounts and internal systems dating back to November. GitGuardian discovered the leak, which security researchers called one of the worst exposures they've witnessed, with concerns about state actors potentially gaining persistence in U.S. government infrastructure. House and Senate Democratic leaders have demanded briefings from CISA on how the breach occurred, its impact, and remediation efforts.
AI summary of the linked source. Not reviewed by an editor. How this works
Run CISA (Cybersecurity and Infrastructure Security Agency)?
Get an email when a new story names CISA (Cybersecurity and Infrastructure Security Agency), usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
What helps against this
How we list vendors
- Privileged access management (PAM)
Admin accounts stop being one stolen password away from control of everything.
- Secrets management
API keys, tokens and passwords stop leaking from code, chat and configuration files.
- Security monitoring (SIEM)
Logs from everywhere end up in one place, with alerts that someone actually sees.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- domain — github.com