CISA has released guidance on managing credential risks, prompted by the potential compromise of a legacy Oracle cloud environment.