CISA Admin Leaked AWS GovCloud Keys on GitHub | Hacker News

A report says a CISA contractor exposed AWS GovCloud keys on GitHub.

A separate CSV reportedly contained plaintext usernames and passwords for dozens of internal CISA systems.

The leak could have given attackers access to sensitive government infrastructure.

It underscores weak secret management and the need for fast notification and credential rotation.