⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A contractor exposed sensitive CISA credentials, including AWS GovCloud keys, in a public GitHub repository for nearly six months. CISA's postmortem reveals that complex system interconnections caused a delayed key rotation, offering lessons for security teams.
The Cybersecurity and Infrastructure Security Agency (CISA) recently disclosed a significant data leak involving a contractor who inadvertently published sensitive internal credentials, including AWS GovCloud keys, in a public GitHub repository for nearly six months. The repository, titled "Private CISA," contained 844 MB of sensitive data, including plaintext usernames and passwords for dozens of internal CISA systems.
A contractor exposed sensitive CISA credentials, including AWS GovCloud keys, in a public GitHub repository for nearly six months. CISA's postmortem reveals that complex system interconnections caused a delayed key rotation, offering lessons for security teams.
The June 2026 Threat Trend Report summarizes how state-sponsored threat groups are integrating generative AI, cloud services, OAuth tokens, and commercial Malware-as-a-Service platforms into their operations. It provides an overview of the evolving tactics used by APT groups.
Purpose and Scope The June 2026 Threat Trend Report on APT Groups summarizes the trend of state-sponsored threat groups actively incorporating generative AI, cloud services, OAuth tokens, and commercial MaaS (Malware-as-a-Service) platforms into their attack operations.
AhnLab ASEC's June 2026 APT Threat Trend Report highlights state-sponsored groups incorporating generative AI, cloud services, OAuth tokens, and MaaS platforms into their attacks.