Lessons Learned from CISA’s Recent GitHub Leak

A series of high-impact security incidents and research findings: CISA issued a postmortem after a contractor accidentally published dozens of internal credentials (including AWS GovCloud keys) on a public GitHub repo for nearly six months, prompting congressional inquiries and lessons about credential hygiene and incident response. The FBI seized hundreds of domains tied to NetNut (Alarum Technologies) after research linked the Popa Android-based botnet (millions of devices) to the company; Popa has been used for advertising fraud, account takeovers and large-scale data scraping. Microsoft’s