Lessons Learned from CISA’s Recent GitHub Leak

Round-up of KrebsOnSecurity reporting (May–July 2026) covering multiple high-impact incidents: a CISA contractor exposed internal credentials (including AWS GovCloud keys) on a public GitHub repo for ~six months, prompting a CISA postmortem and Congressional inquiries; the FBI seized hundreds of NetNut domains after research linked the NetNut residential-proxy service/Alarum Technologies to the Popa Android botnet (millions of compromised devices); two Scattered Spider members pleaded guilty; reporting on the identity and operations of the ‘The Gentlemen’ ransomware group; a record Microsoft “