CISA contractor apparently leaked 'highly sensitive' government AWS keys on Github
- A public GitHub repository called “Private‑CISA” exposed highly sensitive internal credentials and systems used by the US Cybersecurity and Infrastructure Security Agency
- Security researchers confirmed the authenticity of the leak, describing it as one of the worst government data exposures they had ever seen
- The repository, maintained by contractor Nightwing, was eventually locked down, with CISA pledging safeguards to prevent future incidents
Researchers have revealed details on what they called, “one of the most egregious government data leaks in recent history” involving some potentially incredibly sensitive US government information.
Security researcher Guillaume Valadon reached out toKrebsOnSecurity to help contact a person in charge of a public GitHub repository.
This person, who was not responding to messages, was operating a GitHub repository called “Private-CISA” which contained, among other things:
- AWS GovCloud administrative credentials for three accounts
- AWS access keys
- AWS tokens (including “importantAWStokens” file)
- Plaintext usernames and passwordsfor internal...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
