Get the latest tech news

America's top cyber-defense agency left a GitHub repo open with passwords, keys, tokens – and incredibly obvious filenames


I wonder what's in 'external-secret-repo-creds.yaml' and 'AWS-Workspace-Firefox-Passwords.csv'?

None

Get the Android app

Or read this on The Register

Read more on:

Photo of America

America

Photo of keys

keys

Photo of GitHub

GitHub

Related news:

News photo

GitHub's take on age assurance for developers

News photo

GitHub's Internal Repos Breached Via Employee's Use of Malicious VS Code Extension

News photo

Qian Xuesen: The missile genius America lost and China gained (2025)