CISA contains contractor‑leaked cloud keys, tightens repo controls
CISA disclosed that a contractor accidentally published AWS GovCloud keys and build code in a personal GitHub repo, prompting an immediate shutdown and credential rotation. The breach was contained within CISA's environment, with no customer data exposed, and led to tighter repository controls across the agency.