Lawmakers Demand Answers as CISA Tries to Contain Data Leak

KrebsOnSecurity’s recent feed highlights multiple high-impact cyber incidents: a CISA contractor publicly exposed highly privileged AWS GovCloud credentials and internal build/deploy secrets on GitHub, prompting congressional inquiries as CISA races to contain the leak and invalidate credentials; the alleged 23‑year‑old Kimwolf botnet operator (“Dort”) was arrested and charged in Canada and the U.S.; the Canvas education platform suffered a large extortion/defacement incident threatening data on ~275 million students and faculty; and numerous major software vendors (Microsoft, Google/Chrome,苹果