CISA Contractor Leaked AWS GovCloud Keys on GitHub (krebsonsecurity.com)

• Public GitHub repo with plaintext credentials
• Affected: AWS GovCloud keys from a CISA contractor
• Exposed for over six months

"A public GitHub repository managed by a CISA contractor exposed plaintext credentials and internal system tokens for over six months, highlighting critical vulnerabilities in government secrets management and developer security practices."