1
Published signals
currently linked to this company
Company intelligence
Nightwing cybersecurity incidents and threat signals
nightwing.com
This company page brings together public reporting currently associated with Nightwing. It reflects signals published by Shadow Tier and should not be read as a complete incident history.
Company links
0
Last 28 days
recent published signals
1
Last 90 days
recent published signals
0
High or critical
confidence classifications
June 24, 2026
Latest report
most recent published signal
Company signals
All published signals involving Nightwing
CISA Contractor Nightwing Exposed Sensitive Government Credentials on Public GitHub
A public GitHub repository named 'Private-CISA', maintained by a contractor from Nightwing, a government defense contractor, was found to have exposed highly sensitive internal credentials and systems used by the US Cybersecurity and Infrastructure Security Agency (CISA). The repository, publicly accessible from November 13, 2025, until May 18, 2026, contained 844 MB of CISA's internal DevSecOps infrastructure, including administrative credentials for AWS GovCloud accounts, plaintext usernames and passwords for internal CISA systems, SSH keys, and an RSA private key. The contractor reportedly disabled GitHub's default secret-scanning push protections. Public reporting and analysis of the exposure occurred around May 18-29, 2026.
FAQ
Questions about Nightwing cybersecurity reporting
What does the Nightwing page include?
It combines a reviewed organization profile with all current published Shadow Tier signals explicitly linked to Nightwing.
Does every mention of Nightwing appear here?
No. A signal must contain a reliable company connection and meet the publication criteria; incidental or ambiguous mentions are excluded.
Why can the incident count change?
The page follows current published reporting. Counts change as new evidence is added, classifications are reviewed, or older signals leave the reporting window.