CISA Exposes Secrets, Credentials in 'Private' Repo

Mid-May 2026 Dark Reading roundup highlights multiple high-risk incidents and emerging threat trends: CISA accidentally exposed secrets and credentials in a public GitHub repo named “Private‑CISA”; Microsoft Exchange OWA zero‑day CVE-2026-42897 (XSS) is under active exploitation with no patch available; a CVSS 10.0 Cisco SD‑WAN vulnerability is being exploited in the wild; supply‑chain and self‑propagating malware activity is rising (Shai‑Hulud worm infecting npm/TanStack, malicious RubyGems, Hugging Face tokenizer tampering); new commodity malware and stealers target cloud and endpoints (SHub