<\/p>\n
U.S. federal cybersecurity agency CISA said it didn’t have a prepared response plan for a way it should handle a cybersecurity incident in May, after an investigative reporter notified the agency that a contractor had publicly exposed sensitive keys and credentials for accessing U.S. government systems.<\/p>\n
CISA, the Homeland Security unit tasked with defending federal networks and helping to safeguard critical infrastructure, revealed Friday in a postmortem report<\/a> that its staff \u201cneeded to spend time constructing [a playbook] throughout the early stages of the incident.\u201d The agency said it will be important to organize playbooks for \u201call anticipated needs\u201d to be sure that organizations are able to respond within the event of a security incident relatively than scrambling to improvise one in real time.<\/p>\n The agency didn’t say how long the missing playbook delayed CISA\u2019s response, and a spokesperson didn’t immediately reply to TechCrunch\u2019s request for comment.\u00a0<\/p>\n Independent cybersecurity journalist Brian Krebs reported in May<\/a> that a security researcher with cyber firm GitGuardian<\/a> alerted him to reams of exposed passwords stored in a publicly accessible GitHub repository, which an worker of a CISA contractor had uploaded.<\/p>\n Based on Krebs, the researcher tried to alert the contractor but didn\u2019t hear back. Only after Krebs contacted CISA did the agency take the repository offline and revoke and replace the entire exposed credentials to forestall any potential future abuse.<\/p>\n CISA said that no customer or mission data was exposed within the incident and thanked the researcher and reporter for his or her help. The agency said that its channels for allowing security researchers to notify CISA of potential incidents \u201cweren’t well defined,\u201d and that it has made changes to make it easier and faster for researchers to contact the agency.<\/p>\n CISA has been and not using a everlasting director for the reason that start of President Donald Trump\u2019s second term in January 2025. The agency has also been affected by cuts, furloughs, and layoffs affecting about a 3rd of its workforce<\/a> since Trump took office.\u00a0<\/p>\n<\/div>\n Whenever you purchase through links in our articles, we may earn a small commission. This doesn\u2019t affect our editorial independence.<\/em><\/p>\n <\/p>\n","protected":false},"excerpt":{"rendered":" U.S. federal cybersecurity agency CISA said it didn’t have a prepared response plan for a way it should handle a cybersecurity incident in May, after an investigative reporter notified the agency that a contractor had publicly exposed sensitive keys and credentials for accessing U.S. government systems. CISA, the Homeland Security unit tasked with defending federal […]<\/p>\n","protected":false},"author":1,"featured_media":364742,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[10012,735,51919,3522,6257,10492,943],"class_list":["post-364741","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-agency","tag-build","tag-cisa","tag-cybersecurity","tag-incident","tag-playbook","tag-reveals"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t