Hak5: Hackers Turned GitHub Against Its Own Users | Threat Wire

How are hackers exploiting GitHub Actions to steal credentials and secrets from hundreds of repositories in a growing supply chain attack? This week on Hak5, we investigate the GhostAction campaign, Anthropic’s new AI vulnerability scanner, and Wikipedia’s accusations against OpenAI agents. Plus, major changes to Let’s Encrypt TLS certificates, a critical GitLab security flaw, and the latest cybersecurity news, ransomware attacks, and cybercrime arrests.







⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️





@endingwithali →

Twitch: https://twitch.tv/endingwithali

Twitter: https://twitter.com/endingwithali

YouTube: https://youtube.com/@endingwithali

Everywhere else: https://links.ali.dev



Want to work with Ali? [email protected]



[❗] Join the Patreon→ https://patreon.com/threatwire



LINKS

🔗 Story 1:

https://blog.gitguardian.com/ghostaction-github-actions-supply-chain-attack-returns/

https://socket.dev/blog/ghostaction-cloud-credentials

https://thehackernews.com/2026/10/credential-stealing-github-actions.html

🔗 Story 2:

https://thehackernews.com/2026/10/anthropic-expands-claude-access-for.html

https://www.sec.gov/files/33-11216-fact-sheet.pdf

https://www.yahoo.com/news/politics/articles/exclusive-anthropic-breaches-spark-white-224721423.html

https://www.axios.com/2026/10/09/anthropic-ai-security-white-house

https://wikimediafoundation.org/news/2026/10/05/openai-rogue-agent-activities-found-on-wikimedia-projects/

http://red.anthropic.com/oss-scanner/

🔗 Story 3: Let’s Encrypt is Changing

https://linuxiac.com/lets-encrypt-to-cut-ssl-certificate-lifetimes-to-64-days-in-february-2027/

🔗 Story 4: BSides News

https://www.bleepingcomputer.com/news/security/engineer-sentenced-for-locking-thousands-of-devices-on-employer-network/

https://www.bleepingcomputer.com/news/security/musician-gets-18-months-in-prison-for-10-million-streaming-fraud-using-ai-bots/

https://cyberscoop.com/edward-dubrovsky-cypfer-arrested-fbi-extortion-charges/

https://www.justice.gov/opa/pr/known-cybersecurity-expert-and-owner-florida-ransomware-remediation-company-charged

https://www.bleepingcomputer.com/news/security/cyberattack-shuts-down-refrigerators-at-french-supermarkets/

https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/

https://cyberscoop.com/flock-cve-numbering-authority-cna/

-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆

Our Site → https://www.hak5.org

Shop → http://hakshop.myshopify.com/

Community → https://www.hak5.org/community

Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1

Support → https://www.patreon.com/threatwire

Contact Us → http://www.twitter.com/hak5

____________________________________________



Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.