# Sponsored: Inside CISA's disastrous secrets leak

Page: https://stenobird.com/podcast/risky-bulletin-5423259/sponsored-inside-cisa-s-disastrous-secrets-leak
Text version: https://stenobird.com/podcast/risky-bulletin-5423259/sponsored-inside-cisa-s-disastrous-secrets-leak.md
Podcast: [Risky Bulletin](https://stenobird.com/podcast/risky-bulletin-5423259)
Published: 2026-05-31T23:01:14+00:00
Episode link: https://risky.biz/RBNEWSSI130/
Audio file: https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RBNEWSSI130.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/risky-bulletin-5423259/episodes/sponsored-inside-cisa-s-disastrous-secrets-leak
Duration seconds: 1150

## Resource

In this sponsored interview Casey Ellis chats with Truffle Security’s founder and CEO Dylan Ayrey about the recent CISA secrets leak. Days after Brian Krebs ran the story, plenty of the exposed credentials were still live, including an admin-level GitHub app key with full rights over CISA’s org. Dylan walks through why deleting the repo doesn’t fix anything, why most cloud vendors won’t hard-revoke exposed keys (OpenAI and Slack will; AWS, Google and friends mostly won’t), why Hugging Face datasets now hold more secrets than GitHub itself, and what the next generation of multi-provider credential-harvesting supply chain worms is going to look like.

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/risky-bulletin-5423259/episodes/sponsored-inside-cisa-s-disastrous-secrets-leak/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/risky-bulletin-5423259/sponsored-inside-cisa-s-disastrous-secrets-leak.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.