[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmylpscXAO0-_mJqAXlZqYFi5jpeesoDwxfZWSGGAQ2o":3},{"article":4,"iocs":51,"watch_terms":56,"solutions":57,"lesson":32},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"813f7dee-3911-45cd-a041-8817b75bf291","CISA credential leak raises alarms, and Capitol Hill demands answers","cisa-credential-leak-raises-alarms-and-capitol-hill-demands-answers-555618","A researcher who found a repository that leaked on GitHub said it was one of the worst he’s witnessed. The post CISA credential leak raises alarms, and Capitol Hill demands answers appeared first on CyberScoop.","A public GitHub repository maintained by contractor Nightwing exposed sensitive CISA credentials for privileged AWS GovCloud accounts and internal systems dating back to November. GitGuardian discovered the leak, which security researchers called one of the worst exposures they've witnessed, with concerns about state actors potentially gaining persistence in U.S. government infrastructure. House and Senate Democratic leaders have demanded briefings from CISA on how the breach occurred, its impact, and remediation efforts.","CISA credential leak exposes AWS GovCloud and internal system access on GitHub; Congress demands answers.","https:\u002F\u002Fcyberscoop.com\u002Fcisa-credential-leak-congress-demands-answers\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2026\u002F05\u002FGettyImages-2254820015.jpg","2026-05-19T23:28:26+00:00","2026-05-20T00:00:26.468783+00:00",9,[17,20,22,24,27],{"name":18,"type":19},"CISA (Cybersecurity and Infrastructure Security Agency)","vendor",{"name":21,"type":19},"GitGuardian",{"name":23,"type":19},"Nightwing",{"name":25,"type":26},"AWS GovCloud","product",{"name":28,"type":29},"GitHub","technology","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":30,"icon":32,"name":33,"slug":34},null,"Breaches","breaches",[36,41,46],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":42},{"id":43,"icon":32,"name":44,"slug":45},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":47},{"id":48,"icon":32,"name":49,"slug":50},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[52],{"type":53,"value":54,"context":55},"domain","github.com","Public GitHub repository 'Private-CISA' exposed CISA credentials",[18,21,23],{"controls":58,"vendors":138},[59,87,112],{"slug":60,"name":61,"problem":62,"products":63},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":60,"product_name":84,"url":85,"description":86},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"slug":88,"name":89,"problem":90,"products":91},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[92,100,107],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":101,"vendor_name":21,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"gitguardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":108,"product_name":109,"url":110,"description":111},"idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"slug":113,"name":114,"problem":115,"products":116},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",[117,122,130],{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":118,"product_name":119,"url":120,"description":121},"cortex-xsiam","Cortex XSIAM","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xsiam","AI-driven security operations platform that centralises security data, detection, automation and response for the SOC.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"vega","Vega","\u002Fvendor-logos\u002Fvega.png","vega-agentic-detection","Agentic Detection","https:\u002F\u002Fvega.io\u002Fplatform\u002Fagentic-detection","Detection rules that run across security data in the stores where it already lives, so logs do not have to be moved into a central SIEM first.",[139],{"slug":101,"name":21,"logo_path":102,"roles":140},[141],"reported_by"]