Lawmakers Demand Answers as CISA Tries to Contain Data Leak
2026-05-22T19:23:28Z•58456cd618df07d89f05a1c3f594de8795676d92fa61b8e8c2827df3f108f8c6
arrestaws_govcloudbotnetcanvascisacongressional_inquirycredentials_exposeddata_extortionddosgandcrabgithub_leakkimwolfpatch_tuesdayransomwarerevilrouter_vulnerabilitiestoken_harvestzero-day
What happened
KrebsOnSecurity reported a major data leak in which a CISA contractor publicly published highly privileged AWS GovCloud credentials and numerous internal agency secrets on GitHub, prompting congressional inquiries and an ongoing containment/credential invalidation effort. The feed also covers related high-impact incidents: the arrest of the alleged Kimwolf botmaster responsible for massive IoT DDoS activity; a large data-extortion-driven disruption of the Canvas education platform affecting millions; multiple vendor Patch Tuesday advisories (including fixes for zero-days); and campaigns suchas
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 58456cd618df07d89f05a1c3f594de8795676d92fa61b8e8c2827df3f108f8c6
- Enrichment time
- 2026-05-22T19:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.