CISA says weak security controls around the use of public GitHub repos allowed a contractor to accidentally leak private cloud access keys and other credentials

The agency's blog post came as lawmakers pressed the agency for answers.