Na twintig jaar wachten wint Arsenal de Engelse competitie. De Londense club heeft later deze maand ook nog kans om voor het eerst in de clubhistorie de Champions League te winnen.
/s3/static.nrc.nl/wp-content/uploads/2026/05/19223008/190526VER_2033853891_.jpg)
An anonymous reader quotes a report from KrebsOnSecurity: Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said the public archive included files detailing how CISA builds, tests and deploys software internally, and that it represents one of the most egregious government data leaks in recent history. On May 15, KrebsOnSecurity heard from Guillaume Valadon, a researcher with the security firm GitGuardian. Valadon's company constantly scans public code repositories at GitHub and elsewhere for exposed secrets, automatically alerting the offending accounts of any apparent sensitive data exposures. Valadon said he reached out because the owner in this case wasn't responding and the information exposed was highly sensitive.
The GitHub repository that Valadon flagged was named "Private-CISA," and it harbored a vast number of internal CISA/DHS credentials and files, including cloud keys, tokens, plaintext passwords, logs and other sensitive CISA assets. Valadon said the exposed CISA credentials represent a textbook example of poor security hygiene, noting that the commit logs in the offending GitHub account show that the CISA administrator disabled the default setting in GitHub that blocks users from publishing SSH keys or other secrets in public code repositories. "Passwords stored in plain text in a csv, backups in git, explicit commands to disable GitHub secrets detection feature," Valadon wrote in an email. "I honestly believed that it was all fake before analyzing the content deeper. This is indeed the worst leak that I've witnessed in my career. It is obviously an individual's mistake, but I believe that it might reveal internal practices." "Currently, there is no indication that any sensitive data was compromised as a result of this incident," a CISA spokesperson wrote. "While we hold our team members to the highest standards of integrity and operational awareness, we are working to ensure additional safeguards are implemented to prevent future occurrences."
The GitHub account in question was taken offline shortly after CISA was notified about the exposure. However, according to Caturegli, the exposed AWS keys remained valid for another 48 hours.
"What I suspect happened is [the CISA contractor] was using this GitHub to synchronize files between a work laptop and a home computer, because he has regularly committed to this repo since November 2025," Caturegli said. "This would be an embarrassing leak for any company, but it's even more so in this case because it's CISA."
The GitHub repository that Valadon flagged was named "Private-CISA," and it harbored a vast number of internal CISA/DHS credentials and files, including cloud keys, tokens, plaintext passwords, logs and other sensitive CISA assets. Valadon said the exposed CISA credentials represent a textbook example of poor security hygiene, noting that the commit logs in the offending GitHub account show that the CISA administrator disabled the default setting in GitHub that blocks users from publishing SSH keys or other secrets in public code repositories. "Passwords stored in plain text in a csv, backups in git, explicit commands to disable GitHub secrets detection feature," Valadon wrote in an email. "I honestly believed that it was all fake before analyzing the content deeper. This is indeed the worst leak that I've witnessed in my career. It is obviously an individual's mistake, but I believe that it might reveal internal practices." "Currently, there is no indication that any sensitive data was compromised as a result of this incident," a CISA spokesperson wrote. "While we hold our team members to the highest standards of integrity and operational awareness, we are working to ensure additional safeguards are implemented to prevent future occurrences."
The GitHub account in question was taken offline shortly after CISA was notified about the exposure. However, according to Caturegli, the exposed AWS keys remained valid for another 48 hours.
"What I suspect happened is [the CISA contractor] was using this GitHub to synchronize files between a work laptop and a home computer, because he has regularly committed to this repo since November 2025," Caturegli said. "This would be an embarrassing leak for any company, but it's even more so in this case because it's CISA."
Read more of this story at Slashdot.
Hereâs where the story ends. ÂCongratulations, Arsenal, Âchampions of England after 22 years. Farewell then, Pep Guardiola, 10 years of dominance ending in anticlimax. Two domestic cups counts as a Âdisappointment in Pep terms. Eli Junior Kroupi wrote his name in north London legend for ever, as the title race reached its conclusion on the south coast. Erling Haalandâs late equaliser was nowhere near enough.
Andoni Iraola has been able to keep his future movements far more secret, and he received a post-match send-off from a club grateful for three seasons of progressive, Âexciting Âfootball, capped off by qualifying for ÂEurope for the first time. âWhat a night,â he said. âWe played so well.â
Continue reading...Arsenal win title for the first time since 2004
Success follows three runners-up finishes
Arsenal are Premier League champions for the first time since Arsène Wengerâs Invincibles in 2004 after Manchester City drew 1-1 at Bournemouth.
It caps a remarkable achievement for Mikel Arteta in his first job in management, the Spaniard having transformed Arsenal into contenders since taking over from Unai Emery in December 2019. His team finished as runners-up in the past three campaigns and led the way for most of this season before City whittled down Arsenalâs nine-point lead after beating them at the Etihad in April.
Continue reading...MARTORELL (ANP/AFP) - De oudste zoon van de oprichter van de Spaanse modeketen Mango is dinsdag vrijgelaten na het betalen van een borgsom van 1 miljoen euro. Dat meldt persbureau AFP. Jonathan Andic was gearresteerd in het kader van een moordonderzoek naar de dood van zijn vader Isak Andic.
Dinsdagochtend werd bekend dat Jonathan in zijn woning in Barcelona was gearresteerd en naar de rechtbank was gebracht voor verhoor. Jonathan heeft het gerechtsgebouw in Martorell, niet ver van Barcelona, verlaten in gezelschap van zijn advocaten, meldt het Franse persbureau. De 45-jarige moet zijn paspoort inleveren, zich wekelijks bij de rechtbank melden en mag het land niet verlaten, meldt de rechtbank.
Jonathan wordt verdacht van mogelijke betrokkenheid bij de dood van zijn vader, die tijdens een wandeling met zijn zoon in december 2024 om het leven kwam na een val van een klif. Jonathan en zijn twee zussen zijn de belangrijkste eigenaren van Mango na het overlijden van hun vader.
NEW YORK (ANP) - Google-moeder Alphabet hoorde dinsdag bij de verliezers op de aandelenbeurzen in New York. Het Amerikaanse techconcern presenteerde tijdens zijn jaarlijkse ontwikkelaarsconferentie I/O een reeks nieuwe mogelijkheden. Zo werd de grootste verandering aan de Google-zoekbalk in ruim 25 jaar aangekondigd. De bekende zoekfunctie wordt uitgebreid met nieuwe AI-opties.
Ook kondigde Google innovaties aan in de Gemini-app, de AI-assistent van Google. Daarnaast kwam het bedrijf met een nieuwe versie van zijn AI-model. Alphabet eindigde 2,3 procent lager.
Verder was de stemming op de Amerikaanse beursvloeren overwegend negatief. De Dow-Jonesindex eindigde de handelsdag 0,7 procent lager op 49.363,88 punten. De brede S&P 500-index verloor 0,7 procent tot 7353,61 punten en techbeurs Nasdaq zakte 0,8 procent tot 25.870,71 punten.
Beleggers bleven voorzichtig door aanhoudende zorgen over de inflatie. Hoge brandstofkosten stuwen de inflatie en beleggers vrezen dat centrale banken de rente moeten verhogen om de stijging van de consumentenprijzen tegen te gaan.
De olieprijzen gingen dinsdag omlaag doordat een Amerikaanse militaire aanval op Iran werd uitgesteld. De olieprijzen schommelen echter nog steeds rond de 110 dollar per vat, doordat er nog geen duidelijk zicht is op een akkoord tussen de VS en Iran om de oorlog te beĂŤindigen.
Daarnaast wordt uitgekeken naar de resultaten van Nvidia. De grootste verkoper van AI-chips ter wereld presenteert woensdag de kwartaalcijfers. Nvidia en andere chipbedrijven zijn de afgelopen weken nog flink in waarde gestegen door de aanhoudende grote vraag naar chips voor kunstmatige intelligentie (AI). Beleggers wachten nu of de resultaten van het bedrijf de hoge koerswaarderingen in de sector kunnen rechtvaardigen. Nvidia sloot 0,8 procent lager.
hiroya.uga has added a photo to the pool:
On the flight home from Beppu. Two rivers caught the last light below, and Mt. Fuji stood quietly on the right.
