Anatomy of a Federal Security Exposure: CISA Releases Postmortem Following Months-Long Credential Leak on GitHub
Executive Overview In an extraordinary display of institutional transparency following an operational breach, the Cybersecurity and Infrastructure Security Agency (CISA)—the United States government’s premier civilian cyber defense organization—has published a detailed postmortem analyzing a major internal data leak. The security incident involved an embedded contractor who inadvertently exposed sensitive administrative credentials, AWS GovCloud access keys,…