--- title: Lessons Learned from CISA’s Recent GitHub Leak – Krebs... description: CISA published a postmortem on a data leak where a contractor exposed 844 MB of sensitive credentials — including AWS GovCloud keys and plaintext passwords —... canonical: https://daily.dev/posts/lessons-learned-from-cisa-s-recent-github-leak-krebs-on-security-6qcogkyqt twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Lessons Learned from CISA’s Recent GitHub Leak – Krebs on Security | daily.dev og:description: CISA published a postmortem on a data leak where a contractor exposed 844 MB of sensitive credentials — including AWS GovCloud keys and plaintext passwords —... og:url: https://daily.dev/posts/lessons-learned-from-cisa-s-recent-github-leak-krebs-on-security-6qcogkyqt og:image: https://api.daily.dev/og/posts/6QCogkyQT.png og:image:alt: Lessons Learned from CISA’s Recent GitHub Leak – Krebs on Security og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Lessons Learned from CISA’s Recent GitHub Leak – Krebs on Security **[Krebs on Security](https://daily.dev/sources/krebsonsecurity)** · 4 min read · 0 upvotes · 0 comments ## Summary CISA published a postmortem on a data leak where a contractor exposed 844 MB of sensitive credentials — including AWS GovCloud keys and plaintext passwords — in a public GitHub repository for nearly six months. GitGuardian sent nine automated alerts that went unanswered before KrebsOnSecurity intervened. Key lessons include: maintaining mature key rotation capabilities, establishing clear incident reporting channels separate from product vulnerability disclosure, and continuously scanning public code repositories for exposed secrets rather than relying on periodic audits. CISA's zero-trust logging helped confirm no customer data was accessed. GitGuardian's Guillaume Valadon praised CISA's transparency, calling it the first time a national cybersecurity agency publicly advocated for secrets scanning and simplified researcher relations. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CISA GitHub Leak: Incident Response Lessons](https://daily.dev/posts/cisa-github-leak-incident-response-lessons-amtxfvb4j) · GitGuardian · 0 upvotes · 0 comments - [How We Got a CISA GitHub Leak Taken Down in Under a Day](https://daily.dev/posts/how-we-got-a-cisa-github-leak-taken-down-in-under-a-day-1kj9diy7z) · GitGuardian · 0 upvotes · 0 comments - [US cyber agency CISA had to build its incident playbook during the incident, agency reveals](https://daily.dev/posts/us-cyber-agency-cisa-had-to-build-its-incident-playbook-during-the-incident-agency-reveals-rmwntcknb) · TechCrunch · 0 upvotes · 0 comments - [The US agency that defends federal networks did not have its own incident response playbook when it got hacked](https://daily.dev/posts/the-us-agency-that-defends-federal-networks-did-not-have-its-own-incident-response-playbook-when-it--wgupkr9mz) · The Next Web · 0 upvotes · 0 comments --- Tags: [#aws](https://daily.dev/tags/aws), [#github](https://daily.dev/tags/github), [#secrets-management](https://daily.dev/tags/secrets-management), [#gitguardian](https://daily.dev/tags/gitguardian) [View this post on daily.dev](https://daily.dev/posts/lessons-learned-from-cisa-s-recent-github-leak-krebs-on-security-6qcogkyqt) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Lessons Learned from CISA’s Recent GitHub Leak – Krebs on Security","url":"https://daily.dev/posts/lessons-learned-from-cisa-s-recent-github-leak-krebs-on-security-6qcogkyqt","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/lessons-learned-from-cisa-s-recent-github-leak-krebs-on-security-6qcogkyqt"},"datePublished":"2026-07-13T15:17:18.168Z","dateModified":"2026-07-13T15:17:41.383Z","description":"CISA published a postmortem on a data leak where a contractor exposed 844 MB of sensitive credentials — including AWS GovCloud keys and plaintext passwords —...","image":"https://media.daily.dev/image/upload/s--1KxV4ohY--/f_auto/v1722860400/public/Placeholder%2007","thumbnailUrl":"https://media.daily.dev/image/upload/s--1KxV4ohY--/f_auto/v1722860400/public/Placeholder%2007","isAccessibleForFree":true,"articleSection":"Krebs on Security","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Krebs on Security","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/deb3e417ddef4d0e8cc4d704becf6004","url":"https://daily.dev/sources/krebsonsecurity"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/lessons-learned-from-cisa-s-recent-github-leak-krebs-on-security-6qcogkyqt","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"aws,github,secrets-management,gitguardian","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Krebs on Security","item":"https://daily.dev/sources/krebsonsecurity"},{"@type":"ListItem","position":3,"name":"Lessons Learned from CISA’s Recent GitHub Leak – Krebs on Security"}]} ```