CISA leaves the front door open

In a brilliant display of cybersecurity leadership, a third-party developer working with CISA kindly shared dozens of internal credentials, including AWS GovCloud keys, with the entire internet on GitHub. These sensitive keys spent half a year sitting in public view before anyone bothered to notice and revoke them, proving that security posture is mostly theatrical. If we hope to shield our own digital assets from this flavor of sheer incompetence, we must implement rigorous automated scanning of all public repositories. Alternatively, we could just accept that our data is destined to be public anyway.