#4
Ars Technica Security
general
May 19, 2026 at 18:27 UTC
In stunning display of stupid, secret CISA credentials found in public GitHub repo
By Lee Hutchinson
AI Summary
A publicly accessible GitHub repository named 'Private-CISA' exposed CISA credentials including SSH keys and plaintext passwords since at least November 2025, prompting Congressional demands for answers. A researcher who analyzed the leaked repository described it as among the worst credential exposures he had witnessed. The incident is particularly damaging given CISA's role as the U.S. government's lead cybersecurity agency and has triggered Capitol Hill scrutiny.
Relevance score: 85.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →