TLDR Tech / DevOps
CISA Admin Leaked AWS GovCloud Keys on Github
A CISA contractor reportedly exposed credentials for highly privileged AWS GovCloud accounts, internal systems, plaintext passwords, logs, and deployment-related files in a public GitHub repository. The leak is a stark reminder that secrets scanning, org-level GitHub policy enforcement, short-lived credentials, and least-privilege cloud access are not optional controls, especially when repositories are used as informal scratchpads or sync mechanisms.
Read the full story