GhostAction has returned with an expanded credential-theft operation, injecting malicious GitHub Actions workflows into 790 repositories by October 9, 2026. GitGuardian first documented GhostAction in 2025, when it reported 817 affected repositories and 3,325 stolen secrets. The latest wave builds on the same account-takeover approach: attackers... Weiterlesen: GhostAction Hackers Inject Malicious Security Workflows Into 790 GitH…
Intelligence View
⚡ tsecurity.de Intelligence
GhostAction Hackers Inject Malicious Security Workflows Into 790 GitHub Repositories
GhostAction has returned with an expanded credential-theft operation, injecting malicious GitHub Actions workflows into 790 repositories by October 9, 2026.…
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar