<![CDATA[New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub]]>New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said the public archive included files detailing how CISA builds, tests and deploys software internally, and that it represents one of the most egregious government data leaks in recent history.

Link Preview Image
CISA Admin Leaked AWS GovCloud Keys on Github – Krebs on Security

favicon

(krebsonsecurity.com)

]]>https://board.circlewithadot.net/topic/7307f045-02e5-4558-adf7-b643233d3e7a/new-by-me-cisa-admin-leaked-aws-govcloud-keys-on-githubRSS for NodeMon, 25 May 2026 06:56:10 GMTMon, 18 May 2026 20:55:23 GMT60<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 11:47:47 GMT]]>@briankrebs are these LLM instructions or a note to self kind of deal? 😬

]]>https://board.circlewithadot.net/post/https://fd00.space/users/nCrazed/statuses/116601078916759744https://board.circlewithadot.net/post/https://fd00.space/users/nCrazed/statuses/116601078916759744Tue, 19 May 2026 11:47:47 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 07:47:22 GMT]]>@briankrebs

So, does any of keys unlock the repo where the unredacted Epstein files are stored?

]]>https://board.circlewithadot.net/post/https://beige.party/users/airwhale/statuses/116600133544473642https://board.circlewithadot.net/post/https://beige.party/users/airwhale/statuses/116600133544473642Tue, 19 May 2026 07:47:22 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 06:49:55 GMT]]>@briankrebs make something idiot proof and nature will create a better idiot

Scnr

]]>https://board.circlewithadot.net/post/https://social.tchncs.de/users/Okuna/statuses/116599907669238362https://board.circlewithadot.net/post/https://social.tchncs.de/users/Okuna/statuses/116599907669238362Tue, 19 May 2026 06:49:55 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 06:30:31 GMT]]>@Legit_Spaghetti @briankrebs "recent history" as in "this week".

And it's only Tuesday, so...

]]>https://board.circlewithadot.net/post/https://chaos.social/users/christopherkunz/statuses/116599831350733322https://board.circlewithadot.net/post/https://chaos.social/users/christopherkunz/statuses/116599831350733322Tue, 19 May 2026 06:30:31 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 06:26:17 GMT]]>@briankrebs There's no way this is not intentional.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/grumpydad/statuses/116599814742371626https://board.circlewithadot.net/post/https://infosec.exchange/users/grumpydad/statuses/116599814742371626Tue, 19 May 2026 06:26:17 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 06:24:14 GMT]]>@briankrebs can't make this shit up 😳 anyway I am off for some gardening, enough of those pesky computers

]]>https://board.circlewithadot.net/post/https://social.tchncs.de/users/ppxl/statuses/116599806628238234https://board.circlewithadot.net/post/https://social.tchncs.de/users/ppxl/statuses/116599806628238234Tue, 19 May 2026 06:24:14 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 06:15:12 GMT]]>@briankrebs Worskpace

]]>https://board.circlewithadot.net/post/https://radiosocial.de/users/hennichodernich/statuses/116599771152463417https://board.circlewithadot.net/post/https://radiosocial.de/users/hennichodernich/statuses/116599771152463417Tue, 19 May 2026 06:15:12 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 05:03:23 GMT]]>@briankrebs Seems this dude doesn't know how git works and the organisation did not enforced Separation of work and private stuff (on different devices!).

]]>https://board.circlewithadot.net/post/https://social.toot9.de/users/TheTomas/statuses/116599488755902471https://board.circlewithadot.net/post/https://social.toot9.de/users/TheTomas/statuses/116599488755902471Tue, 19 May 2026 05:03:23 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 04:27:41 GMT]]>@chux0r @briankrebs This is correct. The regime shitcanned everyone associated Biden’s CISA, including the contractors and brought their own people in. Watched it happen

]]>https://board.circlewithadot.net/post/https://mstdn.social/users/lawyersgunsnmoney/statuses/116599348359202003https://board.circlewithadot.net/post/https://mstdn.social/users/lawyersgunsnmoney/statuses/116599348359202003Tue, 19 May 2026 04:27:41 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 04:26:07 GMT]]>@briankrebs csv password docs... wow, just wow.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/SnakeOilSalesman/statuses/116599342214131197https://board.circlewithadot.net/post/https://mastodon.social/users/SnakeOilSalesman/statuses/116599342214131197Tue, 19 May 2026 04:26:07 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 01:42:15 GMT]]>@GerardThornley @briankrebs I guess you have to store secrets somewhere, in your source or CI/CD pipeline playbook. I hope people are not checking in private keys, or the CEO's email password.

But govcloud IIRC is basically AWS but "secure for fedramp". Then using "github" for your source control is like the Manhattan Project keeping their notebooks in the local college library, but in a locked room.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/jab01701mid/statuses/116598697854865800https://board.circlewithadot.net/post/https://mastodon.social/users/jab01701mid/statuses/116598697854865800Tue, 19 May 2026 01:42:15 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 01:04:50 GMT]]>@jab01701mid @briankrebs isn't the real wtf storing secrets in a git repo, let alone pushing it to github?

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/GerardThornley/statuses/116598550752774252https://board.circlewithadot.net/post/https://hachyderm.io/users/GerardThornley/statuses/116598550752774252Tue, 19 May 2026 01:04:50 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 01:01:53 GMT]]>@briankrebs

One more Nightwing LinkedIn post, from three days ago.

Link Preview Image
#definingtheedge | Nightwing

Cyber threats in the space domain aren’t theoretical, they’re persistent, asymmetric, and accelerating. From ground infrastructure to on-orbit systems, Nightwing helps uncover critical vulnerabilities before adversaries can exploit them, strengthening the resilience of the architectures our national security depends on. That’s why we’re proud to have sponsored Tectonic and Payload's Inside the Dome this week. Bringing together leaders across government and industry it’s clear that cyber resiliency isn’t optional – it’s foundational to every space mission. United States Space Force // United States Department of War #DefiningTheEdge

favicon

LinkedIn (www.linkedin.com)

]]>https://board.circlewithadot.net/post/https://mastodon.social/ap/users/116580791604418261/statuses/116598539091801960https://board.circlewithadot.net/post/https://mastodon.social/ap/users/116580791604418261/statuses/116598539091801960Tue, 19 May 2026 01:01:53 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 00:54:18 GMT]]>@briankrebs bruh what the fuck lmao

]]>https://board.circlewithadot.net/post/https://438punk.house/users/xyhhx/statuses/116598509301566673https://board.circlewithadot.net/post/https://438punk.house/users/xyhhx/statuses/116598509301566673Tue, 19 May 2026 00:54:18 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 00:33:06 GMT]]>@briankrebs this is unbelievable

]]>https://board.circlewithadot.net/post/https://social.outhill.cc/ap/users/116588544244681879/statuses/116598425932733985https://board.circlewithadot.net/post/https://social.outhill.cc/ap/users/116588544244681879/statuses/116598425932733985Tue, 19 May 2026 00:33:06 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 00:29:33 GMT]]>@briankrebs

CISA should know better than to use Cloud. AWS in particular. SMH.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/SpaceLifeForm/statuses/116598412014862160https://board.circlewithadot.net/post/https://infosec.exchange/users/SpaceLifeForm/statuses/116598412014862160Tue, 19 May 2026 00:29:33 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 00:26:25 GMT]]>@jab01701mid @briankrebs

At some point its intentional. When you have that type of access it should be assumed it is.

]]>https://board.circlewithadot.net/post/https://opensocial.media/users/dogriley/statuses/116598399633566952https://board.circlewithadot.net/post/https://opensocial.media/users/dogriley/statuses/116598399633566952Tue, 19 May 2026 00:26:25 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 00:04:57 GMT]]>@bbdd333 @briankrebs no logs no crime!

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/Viss/statuses/116598315226122205https://board.circlewithadot.net/post/https://mastodon.social/users/Viss/statuses/116598315226122205Tue, 19 May 2026 00:04:57 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Tue, 19 May 2026 00:04:24 GMT]]>@briankrebs “Currently, there is no indication that any sEnSiTIVe datA was compromised as a result of this incident,” the CISA spokesperson wrote. "I mean, of course, sensitive data was exposed, but not sEnSiTIVe datA."

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/bbdd333/statuses/116598313077263007https://board.circlewithadot.net/post/https://infosec.exchange/users/bbdd333/statuses/116598313077263007Tue, 19 May 2026 00:04:24 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Mon, 18 May 2026 23:29:23 GMT]]>@Viss @briankrebs No bid contract

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/krypt3ia/statuses/116598175374150142https://board.circlewithadot.net/post/https://infosec.exchange/users/krypt3ia/statuses/116598175374150142Mon, 18 May 2026 23:29:23 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Mon, 18 May 2026 23:28:39 GMT]]>@krypt3ia @briankrebs which is ironic, because ive talked to almost half a dozen shops who cisa was paying as their outsourced assessment teams, but when i asked to be one of those they told me to fuck off, then 'how dare you'd me because i asked to be paid for my work. i have all the receipts. made sure to keep those emails tagged.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/Viss/statuses/116598172522168062https://board.circlewithadot.net/post/https://mastodon.social/users/Viss/statuses/116598172522168062Mon, 18 May 2026 23:28:39 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Mon, 18 May 2026 23:24:28 GMT]]>@briankrebs Our tax dollars at work

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/krypt3ia/statuses/116598156055702808https://board.circlewithadot.net/post/https://infosec.exchange/users/krypt3ia/statuses/116598156055702808Mon, 18 May 2026 23:24:28 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Mon, 18 May 2026 23:12:15 GMT]]>@richlv from dude's exposed GitHub repo.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/briankrebs/statuses/116598107998488678https://board.circlewithadot.net/post/https://infosec.exchange/users/briankrebs/statuses/116598107998488678Mon, 18 May 2026 23:12:15 GMT<![CDATA[Reply to New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub on Mon, 18 May 2026 23:01:16 GMT]]>@briankrebs Where are these from? Didn’t see in the article.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/richlv/statuses/116598064835330078https://board.circlewithadot.net/post/https://mastodon.social/users/richlv/statuses/116598064835330078Mon, 18 May 2026 23:01:16 GMT