CISA Admits Developing Incident Response Playbook Mid-Event During Security Breach

The US cybersecurity agency CISA admitted it developed an incident response playbook during a real-time security breach, revealing gaps in its preparedness. The agency is now working to improve channels for security researchers to report vulnerabilities.

Independent cybersecurity journalist Brian Krebs reported in May that a security researcher with cyber firm GitGuardian alerted him to reams of exposed passwords stored in a publicly accessible GitHub repository, which an employee of a CISA contractor had uploaded.

Read original article