A listing of files exposed by the "Private CISA" GitHub repo include: The Private CISA GitHub repo exposed dozens of plaintext credentials to important CISA GovCloud resources. The filenames include AWS-Workspace-Bookmarks-April-6-2026.html, AWS-Workspace-Firefox-Passwords.csv, Important AWS Tokens.txt, kube-config.txt, etc.

Notices where this attachment appears

1. Embed this notice
   BrianKrebs (briankrebs@infosec.exchange)'s status on Tuesday, 19-May-2026 10:00:37 JST BrianKrebs

   New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub

   Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said the public archive included files detailing how CISA builds, tests and deploys software internally, and that it represents one of the most egregious government data leaks in recent history.

   https://krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/