CISA Contractor’s Public GitHub Leaked GovCloud and Internal Credentials

A repository named ‘Private‑CISA,’ publicly accessible since November 2025, exposed plaintext passwords, AWS GovCloud tokens, GitHub access keys, and internal documentation. Experts warned of severe consequences had nat…