Lawmakers Demand Answers as CISA Tries to Contain Data Leak
Congressional scrutiny following the CISA data leak signals potential regulatory changes for federal contractor security requirements, particularly around cloud credential management and public repository oversight.
Summary written by editorial AI · Source link below
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity reported this week that a CISA contractor intentionally published AWS GovCloud keys and a vast trove of other agency secrets on a public GitHub account. The inquiry comes as CISA is still struggling to contain the breach and invalidate the leaked credentials.
External link — opens at Krebs on Security in a new tab.
More from the Regulatory Desk
- UK proposes 14-year prison terms for undersea cable sabotage3d
- EU cyber law won’t force fixes for fridge controllers hit in French attack6d
- U.K. Sanctions Cryptomus for RU Money Laundering14 Oct
- Norway fines Microsoft ad firm $9.6 million over Grindr data sharing12 Oct
- CYBERFORT: A Compliance-Chain Platform Operationalising the Cyber Resilience Act for SMEs8 Oct