How We Got a CISA GitHub Leak Taken Down in Under a Day (opens in new tab)

Covers CISA Admin Leaked AWS GovCloud Keys on GithubCovered by 6 sources including theregister, thehackernews.comDiscussed on Hacker News

On May 14, GitGuardian found a public GitHub repository called "Private-CISA" — 844 MB of plain-text passwords, AWS tokens, and Entra ID SAML certificates belonging to CISA, exposed since November 2025. Some credentials were still valid. CISA pulled it offline within 26 hours.

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 6 articles

theregister·

America's top cyber-defense agency left a GitHub repo open with with passwords, keys, tokens – and incredibly obvious filenames

thehackernews.com·

ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories

Metacurity·

Anthropic eases threat-sharing rules as Cloudflare details frontier AI cyber gains

View all 6 ›