US cybersecurity agency CISA had to build its incident playbook during the incident, agency reveals
CISA was forced to invent its own incident‑response playbook on the fly after a contractor’s GitHub repository exposed thousands of passwords. The real‑time scramble revealed a critical gap in the agency’s preparedness, highlighting the risks posed by third‑party access to sensitive government systems.

