US Agency's Cloud Security Exposed: Passwords in Plain Sight

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently had its cloud storage security compromised, with digital keys and sensitive information left exposed. A report revealed that passwords, keys, and tokens were accessible in plain text, including credentials for Amazon AWS GovCloud servers and internal CISA systems. The repository, named 'Private-CISA,' reportedly contained a file with plaintext passwords in a CSV format. This vulnerability is believed to have lasted for approximately six months, starting from November of the previous year. The incident is linked to an employee of a government contractor, Nightwing, who allegedly used GitHub for transferring work data between devices. This method is considered highly insecure, akin to emailing sensitive documents to oneself. The security firm GitGuardian, which monitors GitHub for such secrets, described the leak as the worst they had witnessed. CISA has acknowledged the incident and is implementing additional safeguards, stating there is no indication of data compromise. However, the breach highlights significant security concerns within the agency.