In stunning display of stupid, secret CISA credentials found in public GitHub repo
2026-05-20T08:51:50Z•fcb42409880e630ec9ba6d260e907d1da3bb675c9ec2758fd0de8cfd4203f5a6
AI vulnerability discovery","Mythos","GPT‑5.5","bug bounty noiseASP.NETBitLockerBitwardenCI/CDCISACanvas outageCheckmarxCopyFailDaemon ToolsGitHubKubernetesLinuxLinux vulnerabilityMicrosoftSSH keysUbuntu outageWindows 11containerscredentials‑exposedelement‑datamacOSplaintext passwordssupply‑chain attackzero‑day
What happened
Multiple high‑impact security incidents and trends reported: US CISA credentials (SSH keys, plaintext passwords and other secrets) were exposed in a public GitHub repo since Nov 2025; a Windows 11 BitLocker zero‑day that defeats default protections is under investigation; several severe Linux vulnerabilities (including CopyFail) threaten multi‑tenant servers, containers, CI/CD and Kubernetes; multiple supply‑chain compromises (Daemon Tools backdoor, malicious element‑data package, targeted attacks on Checkmarx and Bitwarden) have been observed; Microsoft issued an emergency ASP.NET update for
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- fcb42409880e630ec9ba6d260e907d1da3bb675c9ec2758fd0de8cfd4203f5a6
- Enrichment time
- 2026-05-20T08:51:50Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.