The Radical

They don't want you to read this

CISA Leaked Master Keys to Federal Servers on GitHub #

Wednesday, 20 May 2026 · words

A single silver key lying on a dark, reflective circuit board under a spotlight. 50mm lens, high contrast, desaturated color grading, sharp focus, 4K HDR.
A single silver key lying on a dark, reflective circuit board under a spotlight. 50mm lens, high contrast, desaturated color grading, sharp focus, 4K HDR.

Security researcher Brian Krebs confirmed on Tuesday that America’s Cybersecurity & Infrastructure Agency (CISA) left a massive store of plaintext passwords and private keys on a public website. The repository, ironically named 'Private-CISA,' was discovered by GitGuardian’s code scans after being exposed since November 2025. According to testing by Seralys founder Philippe Caturegli, the leaked credentials allowed high-privilege access to multiple Amazon Web Services GovCloud accounts. The repository administrator reportedly disabled GitHub’s default protection against committing secrets, effectively opening the door for any hacker to walk into the federal cloud.

This administrative failure arrives as the state pivots toward the 'Cognitive Enclosure' of digital life. As the government proves it cannot manage a simple GitHub folder, tech giants like Google and Microsoft are moving to adopt advanced security designs originally developed by the late Dr. Peter Neumann. These private firms are positioning themselves as the only competent guardians of the digital perimeter. By allowing their own security protocols to rot, federal agencies are forcing a structural dependency on private AI subscriptions for national defense. The keys to the kingdom were not stolen; they were left in a public lobby by a bureaucracy that has forgotten how to lock the door.