Home / May 24, 2026 / Story
0
#8 Schneier on Security threat-intel May 22, 2026 at 13:58 UTC

CISA Security Leak

By Bruce Schneier

AI Summary

A CISA contractor inadvertently exposed credentials to multiple highly privileged AWS GovCloud accounts and numerous internal CISA systems via a public GitHub repository, in what security experts are calling one of the most egregious government data leaks in recent history. The repository also contained detailed documentation on how CISA internally builds, tests, and deploys software. The repository was taken down as of last weekend, but the exposure window and full blast radius remain under investigation.

Relevance score: 79.0/100

# More from May 24