CISA Leaked Master Keys to Federal Servers on GitHub #
Security researcher Brian Krebs confirmed on Tuesday that America’s Cybersecurity & Infrastructure Agency (CISA) left a massive store of plaintext passwords and private keys on a public website. The repository, ironically named 'Private-CISA,' was discovered by GitGuardian’s code scans after being exposed since November 2025. According to testing by Seralys founder Philippe Caturegli, the leaked credentials allowed high-privilege access to multiple Amazon Web Services GovCloud accounts. The repository administrator reportedly disabled GitHub’s default protection against committing secrets, effectively opening the door for any hacker to walk into the federal cloud.
This administrative failure arrives as the state pivots toward the 'Cognitive Enclosure' of digital life. As the government proves it cannot manage a simple GitHub folder, tech giants like Google and Microsoft are moving to adopt advanced security designs originally developed by the late Dr. Peter Neumann. These private firms are positioning themselves as the only competent guardians of the digital perimeter. By allowing their own security protocols to rot, federal agencies are forcing a structural dependency on private AI subscriptions for national defense. The keys to the kingdom were not stolen; they were left in a public lobby by a bureaucracy that has forgotten how to lock the door.