"private key" (compromised OR stolen OR leaked) · X 热门 · 2026-09-22 18:47 UTC

# "private key" (compromised OR stolen OR leaked) — X 热门讨论 (2026-09-22 18:47 UTC)

## @IntCyberDigest (International Cyber Digest) · 09-22 18:05 · ♥52 ↻5 💬1 ❗️ A leaked private key gave write access to two private US Centers for Disease Control and Prevention (CDC) linked repositories for 17 months.

Researchers tested thousands of leaked GitHub App private keys and found that 474 leaked GitHub App private keys that still worked. 44 of the affected Apps had full org admin rights.

One of the GitHub App keys was committed to the CDC's official GitHub organisation in April 2025. The access could have been abused to run code in CDC's Azure environment.

It was revoked on 18 September. https://x.com/IntCyberDigest/status/2102459160604360845