Connect with us

News

US cyber agency CISA exposed reams of passwords and cloud keys to the open web

info

Published

on

Cisa 2240293485.jpg

U.S. cybersecurity agency CISA may have escaped a sizable security breach, thanks to a good-faith security researcher who identified publicly exposed credentials that allowed access to government cloud and internal agency systems.

As first reported by independent security reporter Brian Krebs, GitGuardian security researcher Guillaume Valadon found reams of exposed plaintext credentials listed in spreadsheets, which had been made publicly accessible in a GitHub repository by an employee working for a CISA contractor.

Valadon told Krebs that the exposed credentials were used for accessing systems belonging to CISA and its parent agency, the Department of Homeland Security. Valadon said the credentials included access tokens, cloud keys, and other sensitive files. Valadon told Krebs that he tested some of the keys to verify that they were valid. 

He then reported the lapse to Krebs because the CISA contractor who maintained the GitHub environment did not respond to their alerts.

The security lapse is particularly embarrassing for CISA because the U.S. government agency is responsible for cybersecurity across the civilian federal network. The organization also advises on best cybersecurity practices, which includes storing passwords in secured password managers and not in unprotected spreadsheets.

It’s not clear if anyone found or used the credentials other than Valadon. When reached by TechCrunch, a CISA spokesperson did not immediately comment or say if the agency has any evidence of a breach stemming from this exposure. TechCrunch asked if the agency has revoked and replaced the exposed credentials following the incident.

While the incident was traced back to an employee working for a CISA contractor, CISA is ultimately responsible for the security of its own network and systems, including contractors who work for the agency.

CISA has been without a permanent director since January 20, 2025, when then-CISA director Jen Easterly stepped down ahead of the start of the incoming Trump administration. CISA has also lost about a third of its workforce following cuts, furloughs, and layoffs since Trump took office.

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

NIHSA issues flood alert for 1,841 Bauchi communities, 16 other states

info

Published

on

By

600DB7A0 0FA9 4687 8520 2B857C9B401B scaled.jpeg

The Nigeria Hydrological Services Agency (NIHSA) has issued a seven-day flood advisory, warning of a medium flood risk in 17 states between July 21 and July 27.

The agency said the alert followed rising water levels at key river monitoring stations, increasing the likelihood of localised flooding along river channels and floodplains.

NIHSA Director-General, Umar Mohammed, disclosed this in the National Flood Advisory (Alert No. NFA-2026-200) issued on Tuesday.

He said the affected states are Adamawa, Bauchi, Benue, Borno, Edo, Gombe, Imo, Jigawa, Kaduna, Kano, Kebbi, Nasarawa, Niger, Plateau, Taraba, Yobe and Zamfara.

According to Mr Mohammed, river levels at Saminara on the Karam River, Waya Dam Site on the Waya River and Amber on the Amber River had exceeded watch and warning thresholds.

He said 16 gauging stations nationwide were recording elevated river stages, placing nearby communities at risk of localised flooding.

Mr Mohammed urged state governments, local authorities and residents of flood-prone communities to take precautionary measures immediately.

NIHSA said Bauchi had the highest exposure, with 1,841 communities, 145 schools, 101 health facilities and eight markets identified as vulnerable.

The agency also identified vulnerable communities and public facilities in Edo, Imo, Kaduna, Plateau and Benue states.

Mr Mohammed urged the National Emergency Management Agency (NEMA), State Emergency Management Agencies (SEMAs), local governments and community leaders to activate emergency response plans.

He recommended relocating residents, livestock and valuables from floodplains to safer locations.

He also advised emergency agencies to pre-position food, medical supplies and water treatment materials in areas likely to be affected.

The NIHSA boss called for community mobilisation through early warning volunteers and local communication channels to ensure timely dissemination of flood alerts.

He cautioned residents against walking, driving or riding through flooded roads, bridges and fast-flowing waterways.

Mr Mohammed further urged authorities to clear blocked drains, culverts and waterways to improve water flow and reduce flooding.

He advised the public and relevant agencies to monitor daily flood updates and advisories issued by NIHSA.

(NAN)

Continue Reading

News

ADC dismisses rumours of Adamawa governorship candidate’s replacement

info

Published

on

By

ADC.jpg

Rumours have continued to circulate over the possible replacement of the Adamawa State governorship candidate of the African Democratic Congress (ADC), Omar Suleiman.

Until last week, the rumour was that Suleiman, popularly known as Omrana, would be replaced by Abdulrahman Haske, a leading All Progressives Congress (APC) governorship aspirant ahead of the party’s primary, who was said to have defected to the ADC.

No sooner had the public learnt that Haske had returned to the APC than fresh rumours emerged over the weekend that one Alhaji Tukur Modibbo would now replace Omrana.

Addressing the rumours on Tuesday, a founding member of the ADC in Adamawa State, Suleiman Adamu Jimeta, described them as false and potentially damaging to the party.

He said the purported plan to bring in Tukur Modibbo, with some party stakeholders allegedly welcoming the idea and describing Modibbo as a better choice, was baseless, insisting that no such decision had been communicated through the appropriate channel.

“Omar Suleiman remains the party’s legitimate candidate and has worked tirelessly to earn the confidence and support of ADC members across the state,” Jimeta stated.

Describing the rumoured move as a recipe for confusion and internal division, he cautioned that it could severely weaken the party’s chances in the 2027 elections.

The Adamawa State chapter of the ADC had not issued any statement confirming any change to its governorship ticket as of the time of filing this report on Tuesday evening.

Continue Reading

Trending