gizmodo.com Β·
The Worst Leak That Ive Witnessed U S Cybersecurity Agency Leaves Its Digital Keys Out in Public on Github

The full article is on the original publisher site. This page only shows the headline and a very short excerpt.
AI insight
AI-generatedThe incident highlights cybersecurity vulnerabilities within a U.S. government agency, potentially affecting confidence in government IT security. Direct commercial impact is weak; no specific company, product, or supply chain disruption is identified. The primary sector affected is cybersecurity, as the event underscores the importance of secure code management and may influence demand for security auditing tools.
Signals our AI researcher identified
Extracted by our AI model from this article and related public sources β not direct quotes from the publisher.
- CISA exposed sensitive digital keys and passwords in a public GitHub repo named 'Private-CISA' for ~6 months (Nov 2022 to May 2026).
- Exposed files included admin credentials for three AWS GovCloud servers and plaintext usernames/passwords for internal CISA systems.
- CISA stated no indication of data compromise as of publication.