A campaign called GhostAction has placed malicious GitHub Actions workflows in 790 repositories, putting cloud credentials, software-publishing tokens, and AI service keys at risk. The total is OpenSourceMalware’s count of publicly recoverable, validated repositories through October 9, 2026; it is not a claim that every repository leaked... Weiterlesen: Hackers Hijack 790 GitHub Repositories to Steal Cloud Credentials and…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Hijack 790 GitHub Repositories to Steal Cloud Credentials and AI API Keys
A campaign called GhostAction has placed malicious GitHub Actions workflows in 790 repositories, putting cloud credentials, software-publishing tokens, and AI…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
27 Quellen
CVE-2026-97621 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 analogix_dp analogix_dp.c rockchip_dp_drm_encoder_enable buffer overflow (WID-SEC-2026-3579)
26 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-97899 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 i915 query_perf_config_list memory leak (WID-SEC-2026-3579) VVulDB Updatesvor 2 Std.CVE-2026-97900 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 DRM execution locking drm_exec.c drm_exec_prepare_array num_objects infinite loop (WID-SEC-2026-3579) VVulDB Updatesvor 2 Std.CVE-2026-97901 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 genetlink use after free (WID-SEC-2026-3579) VVulDB Updatesvor 2 Std.CVE-2026-97902 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 Filesystem Freezing thaw_super_locked return value (WID-SEC-2026-3579) VVulDB Updatesvor 2 Std.CVE-2026-97903 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 Process Exit proc_flush_pid thread_pid use after free (WID-SEC-2026-3579) VVulDB Updatesvor 2 Std.CVE-2026-97904 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 cpufreq cpufreq_policy_alloc race condition (WID-SEC-2026-3579)
+20
12 Quellen
WordPress Backup Plugin Developer Hacked to Inject Malicious Code on Installed Sites
11 weitere Quellen
VVulDB Updatesvor 5 Std.CVE-2025-48325 | WP Admin Theme Plugin up to 1.0 on WordPress Setting cross-site request forgery VVulDB Updatesvor 5 Std.CVE-2025-48351 | Kento Splash Screen Plugin up to 1.4 on WordPress cross-site request forgery VVulDB Updatesvor 5 Std.CVE-2025-48349 | Video Gallery Plugin up to 1.1.7 on WordPress cross site scripting VVulDB Updatesvor 5 Std.CVE-2025-48324 | tli Auto Twitter Poster Plugin up to 3.4 on WordPress cross site scripting VVulDB Updatesvor 5 Std.CVE-2025-48322 | Statify Widget Plugin up to 1.4.6 on WordPress cross site scripting VVulDB Updatesvor 5 Std.CVE-2025-48347 | bxSlider Integration Plugin up to 1.7.2 on WordPress cross site scripting
+5
12 Quellen
GitHub Release: anomalyco/opencode v2.1.2 (21.10.2026)
11 weitere Quellen
GGitHubvor 3 Std.GitHub Release: anomalyco/opencode vgithub-v1.2.27 (21.10.2026) GGitHubvor 5 Std.GitHub Release: openclaw/openclaw vrelease-publish/33b16c7ef875-1792558197 (21.10.2026) GGitHubvor 2 Std.GitHub Release: openclaw/openclaw v2026.10.10-beta.3 (21.10.2026) GGitHubvor 1 Std.GitHub Release: openclaw/openclaw vrelease-publish/5303aee80400-1792560599 (21.10.2026) GGitHubvor 4 Std.GitHub Release: anthropics/claude-code v2.1.306 (21.10.2026) GGitHubvor 10 Std.GitHub Release: ollama/ollama v0.40.7 (20.10.2026)
+5
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4284543/sichere-programmierung/hackers-hijack-790-github-repositories-to-steal-cloud-credentials-and-ai-api-keys/