CISA credentials get leaked on GitHub

Summary

The Daily Scoop Podcast Summary

Episode: CISA credentials get leaked on GitHub
Date: May 20, 2026
Host: Billy Mitchell

---

Episode Overview

This episode focuses on the alarming news of sensitive credentials from the Cybersecurity and Infrastructure Security Agency (CISA) being exposed on a public GitHub repository. Host Billy Mitchell outlines the reactions from lawmakers, cybersecurity experts, and security firms. The episode also spotlights a new bipartisan House bill instructing the Office of Personnel Management (OPM) to assess the federal biotechnology workforce, aiming to keep the U.S. ahead in biotech innovation.

---

Key Discussion Points & Insights

1. Exposure of CISA Credentials on GitHub

Timestamps: 00:00–03:50

• Incident Recap:
  Congressional Democrats are pressing CISA for answers after the exposure of sensitive agency credentials on GitHub. Security researchers have dubbed this one of the most severe federal credential leaks to date.

• Details from the Discovery:

  • Security firm GitGuardian found the public repository, apparently managed by a federal contractor, titled "Private Cisa".
  • The leak exposed privileged AWS GovCloud and internal CISA system credentials dating back to November 2025.
  • The primary fear was state actors exploiting the data for persistent access rather than just a one-time breach.

• Security Community Response:

  • The leak is being called by some “one of the worst” (security researcher, paraphrased).
  • Concerns of state-based threat actors leveraging the credentials for undetected long-term access rather than immediate system disruption.

• Congressional Reaction:

  • Rep. Bennie Thompson (D-MS), Homeland Security Committee’s top Democrat, and Delia Ramirez, top Democrat on its cyber subcommittee, sent a letter to CISA’s Acting Director Nick Anderson demanding a briefing.
  • Main queries:
    • How did this happen?
    • What are the security consequences?
    • What remediation and corrective actions are underway?
    • What steps are being taken with contractor personnel?
    • How will future leaks be prevented?
  • Sen. Maggie Hassan (D-NH) also requested a classified briefing to probe which systems were exposed and assess the forensic work done.

• Underlying Causes:

  • Both letters mention budget and personnel cutbacks at CISA as possible contributors to the failure.

Notable Quotes:

• “A security researcher with GitGuardian, said his main fear upon verifying the leak was real was that a state actor would get the data and might be able to do bad stuff. State based attackers who obtained the credentials might be able to gain persistence... worse than an attacker destroying a database or having an intruder gain access to a government system on its own.”
  — Billy Mitchell (01:22)

• “Congressional Democrats want answers from the Cybersecurity and Infrastructure Security Agency about the reported public exposure... security researcher who discovered it called one of the worst leaks he's ever seen.”
  — Billy Mitchell (00:20)

---

2. Legislative Update: Federal Biotech Workforce

Timestamps: 03:51–04:03

• Overview of the New House Bill:

  • The Federal Biotechnology Workforce Assessment Act instructs OPM to coordinate with various agency heads to define, assess, and optimize the federal government's biotech talent pool.
  • Sponsored by Reps. Ro Khanna (D-CA) and Rich McCormick (R-GA), aiming to maintain U.S. leadership in biotechnology, specifically to keep ahead of China.

• Assessment Elements:

  • Determine the full scope and required number of biotech roles across critical agencies (Agriculture, Commerce, Defense, Energy, etc.).
  • Outline how each biotech position supports overarching federal goals and the requisite qualifications.
  • Identify barriers to biotech workforce development and propose mitigation strategies.
  • Investigate options for cross-agency detailing and training to plug workforce gaps.

Notable Quotes:

• “The Bill from Representatives Ro Khanna... and Rich McCormick... is aimed at ensuring the federal government workforce keeps the country a step ahead of China in the biotech space.”
  — Billy Mitchell (03:51)

---

Memorable Moments and Quotes

• “My main fear... was that a state actor would get the data and might be able to do bad stuff.”
  — Cited by Billy Mitchell (01:29)

• On congressional concerns:
  “They said they wanted to learn how this serious security lapse occurred, any potential security consequences, remediat activities, corrective actions related to the contractor personnel involved...”
  — Billy Mitchell (02:09)

• On legislative priorities:
  “Priority number one for OPM's assessment is identifying the total number of biotech positions required at federal agencies.”
  — Billy Mitchell (03:42)

---

Episode Timeline

• 00:00–00:20: Opening, episode theme intro
• 00:20–03:50: CISA credential leak: discovery, response, and congressional action
• 03:51–04:03: House bill on federal biotech workforce
• 04:03–04:37: (Advertisement skipped)
• 04:37–05:02: Wrap-up and sign-off (non-content)

---

Tone and Language

Billy Mitchell maintains a professional, news-oriented tone throughout, sticking closely to the facts, attributing comments appropriately, and emphasizing the seriousness of the security incident and the legislative efforts to address workforce gaps in critical technology fields.

---

For more news at the intersection of the federal government and technology, visit fedscoop.com.

Transcript

[Billy Mitchell]

Today on the Daily Scoop podcast from the Scoop News Group, CISA credentials get leaked on GitHub and a new House bill would enlist OPM to conduct a federal biotech workforce assessment. It's Wednesday, May 20, 2026. Welcome to the Daily Scoop podcast, where you'll hear the latest news and trends facing government leaders. I'm the host of the Daily Scoop Podcast, Billy Mitchell. Thanks so much for joining me. And now let's dive into the day's top headlines. Congressional Democrats want answers from the Cybersecurity and Infrastructure Security Agency about the reported public exposure of sensitive agency credential data on GitHub in an incident that the security researcher who discovered it called one of the worst leaks he's ever seen. Other security professionals also voiced concern Tuesday about the leak and the potential for abuse by any malicious parties who got a hold of the information. Security firm GitGuardian said it discovered a public GitHub repository last week that exposed credentials for privileged AWS, GovCloud accounts and internal CISA systems dating back to November. The repository, apparently maintained by a contractor, was named Private Cisa. A security researcher with GitGuardian, said his main fear upon verifying the leak was real was that a state actor would get the data and might be able to do bad stuff. State based attackers who obtained the credentials might be able to gain persistence, the researcher said, calling it worse than an attacker destroying a database or having an intruder gain access to a government system on its own. Mississippi Representative Benny Thompson, the top Democrat on the Homeland Security Committee, and Delia Ramirez, the top Democrat on the panel's cyber subcommittee, demanded a briefing Tuesday in a letter to CSA's Acting Director Nick Anderson. In the letter, they said they wanted to learn how this serious security lapse occurred, any potential security consequences, remediat activities, corrective actions related to the contractor personnel involved, and efforts to monitor for and prevent similar activity from occurring in the future. Senator Maggie Hassan, Democrat of New Hampshire, also sent a letter Tuesday to Anderson seeking a classified briefing to answer questions about which systems were exposed, what forensic work CISA did to evaluate potential damage and what corrective action it had taken. Both letters pointed to personnel and budget cutbacks at the agency as a potential contributor to the incident. CISA said it was looking into what happened with the exposure. And now moving on to other news, the Office of Personnel Management would get a better handle on the federal biotechnology workforce under a pair of bills from a bipartisan House duo introduced Wednesday. The Federal Biotechnology Workforce Assessment act directs OPM to coordinate with agency heads on defining the federal biotech workforce. In addition to assessing current and future needs for those biliterate federal employees, the Bill from Representatives Ro Khanna, Democrat of California, and Rich McCormick, Republican of Georgia, shared first with FedScoop, is aimed at ensuring the federal government workforce keeps the country a step ahead of China in the biotech space. Priority number one for OPM's assessment is identifying the total number of biotech positions required at federal agencies. The legislation is focused specifically on the Departments of Agriculture, Commerce, Defense, Energy, Health and Human Services, Homeland Security, Interior, State and Treasury, as well as the Environmental Protection Agency, the National Science foundation, NASA, and the offices of the Director of National intelligence and the US Trade Representative. OPM's work should include details and how each biotech position supports overarching federal objectives as well as the qualifications required for the roles. There are also callouts in the bill for OPM to identify challenges that may hinder federal biotech workforce development and how those challenges may be mitigated. The bill also seeks to determine if some biotech skilled employees could be detailed to other agencies and the degree to which training could lessen some gaps. For more news at the intersection of the federal government and technology, make sure

[GDIT Announcer]

to visit fedscoop.com the battlespace has entered a new era of relentless multi domain competition spanning land, air, sea, space, cyber and beyond. In this rapidly shifting environment, speed, precision, technology and information superiority are not just advantages, they are critical to modern warfare. Register today for GDIT's Emerge Battle Space of the Future June 2 at the Waldorf Astoria in Washington, D.C. where military leaders, technologists and industry leaders will converge

[Billy Mitchell]

to explore the breakthroughs defining the future of warfighting and what it takes to secure and maintain strategic dominance in an increasingly contested world.

[GDIT Announcer]

For more information about the event and to register, make sure to visit gditbattlespace.upgather.com or visit the events page on fedscoop.com

[Podcast Producer]

thanks so much for tuning in to

[Billy Mitchell]

another episode of the Daily Scoop Podcast,

[Podcast Producer]

available on all podcast platforms. If you've already rated the podcast on your platform of choice, thanks so much. High ratings and good reviews of the show help more people to find it. The Daily Scoop Podcast is a production of the Scoop News Group in Washington, dc. Adam Butler and Carl Fisher help put the show together and the entire Scoop News Group team contributes. We'll be back tomorrow with more top headlines. Until then, I'm your host as always, Billy Mitchell. Thanks so much for listening.