[SECURITY]■ STORY TIMELINE
CISA CREDENTIALS EXPOSED IN PUBLIC GITHUB REPO
The Cybersecurity and Infrastructure Security Agency left SSH keys, plaintext passwords, and other sensitive credentials in a publicly accessible GitHub repository for months. The exposure began in November 2025 and went undetected until discovery.
Ars Technica+0m
SSH keys, plaintext passwords, other sensitive data had been up since November 2025.