> TritonInfoSec News
Home / May 21, 2026 / Story
0
#5 Dark Reading general May 19, 2026 at 19:49 UTC

CISA Exposes Secrets, Credentials in 'Private' Repo

By Rob Wright

AI Summary

CISA's GitHub repository, publicly accessible since November 2025 and ironically named 'Private-CISA,' was found to contain exposed secrets and credentials. Senator Maggie Hassan (D-NH) sent a letter to CISA's acting director demanding answers, and a researcher described it as one of the worst credential leaks they had witnessed. The incident undermines confidence in federal cybersecurity posture and highlights the risk of misconfigured public repositories in sensitive government contexts.

Read full article → https://www.darkreading.com/cybersecurity-operatio…

Relevance score: 84.0/100

# More from May 21

  1. 1
    GitHub confirms breach of 3,800 repos via malicious VSCode extension BleepingComputer
  2. 2
    Microsoft Takes Down Malware-Signing Service Behind Ransomware Attacks The Hacker News
  3. 3
    Microsoft disrupts Fox Tempest malware-signing-as-a-service platform tied to ransomware gangs The Record
  4. 4
    Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit The Hacker News
  5. 6
    Attackers hit vulnerabilities hard last year, making exploits the top entry point for breaches CyberScoop
  6. 7
    7-Eleven confirms data breach claimed by the ShinyHunters gang BleepingComputer
  7. 8
    Grafana breach caused by missed token rotation after TanStack attack BleepingComputer
  8. 9
    Over 320 NPM Packages Hit by Fresh Mini Shai-Hulud Supply Chain Attack SecurityWeek
  9. 10
    Microsoft Self-Service Password Reset abused in Azure data theft attacks BleepingComputer