Free Republic

The US Cybersecurity and Infrastructure Security Agency (CISA) left open a GitHub repository named “Private-CISA” containing plain-text passwords, private keys, tokens, and secrets – with obvious file names like “external-secret-repo-creds.yaml” and “AWS-Workspace-Firefox-Passwords.csv” – for six months. GitGuardian researcher Guillaume Valadon, fresh off a recent talk on Kubernetes secret leaks, found the public repository on May 14, and told The Register that he “quickly understood that the leak was bad and that time was running out. A national agency having 844 MB of production infrastructure material in a public GitHub repository for six months is as serious as a secrets leak...

The rise of cyber attacks - and the call for global collaboration on solutions that reduce the threat - has led the United States Secret Service to become the sixth government agency to join Transglobal Secure Collaboration Program (TSCP). The move reflects a growing awareness of the need for a united effort and common solutions to defend against the advanced persistent threat of cyber attacks against nations and commercial organizations alike. High-profile attacks, such as GhostNet and the U.S. electrical grid infiltration, create the imperative for government agencies and private industry to work together on viable and robust solutions that...