CISA's Cloud Key Catastrophe: A Security Agency's Blind Spot The recent revelation that the US Cybersecurity and Infrastructure Security Agency (CISA) exposed reams of passwords and cloud keys to the open web has sent shockwaves through the security community.
This lapse is particularly galling, given CISA's role as a leading authority on cybersecurity best practices.
According to reports by independent security researcher Brian Krebs, a GitHub repository maintained by a CISA contractor was found to contain sensitive credentials listed in spreadsheets.