i learned this lesson, with smaller stakes

A CISA contractor exposed credentials, config files, and access tokens in a public GitHub repository. I had a smaller incident with a similar pattern — and a very different blast radius — in April.

May 19, 2026 · Scott LeBlanc