Researchers Uncover GhostAction Supply Chain Attack Targeting 790 GitHub Repositories

OpenSourceMalware (OSM) has documented a new escalation of the GhostAction campaign. Attackers hijack GitHub accounts, inject malicious Actions workflows into every repository those accounts can write to, and steal CI/CD secrets. OSM can recover 790 affected repositories through October 9, and it treats that number as a public lower bound.... Weiterlesen: Researchers Uncover GhostAction Supply Chain Attack Targeting 790 Git…