GhostAction has returned with an expanded credential-theft operation, injecting malicious GitHub Actions workflows into 790 repositories by October 9, 2026. GitGuardian first documented GhostAction in 2025, when it reported 817 affected repositories and 3,325 stolen secrets. The latest wave builds on the same account-takeover approach: attackers... Weiterlesen: GhostAction Hackers Inject Malicious Security Workflows Into 790 GitH…
Intelligence View
⚡ tsecurity.de Intelligence
GhostAction Hackers Inject Malicious Security Workflows Into 790 GitHub Repositories
GhostAction has returned with an expanded credential-theft operation, injecting malicious GitHub Actions workflows into 790 repositories by October 9, 2026.…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
11 sources
CVE-2026-16762 | Qt up to 4.2.x/6.8.8/6.11.1 QXmlStreamReader denial of service (EUVD-2026-108655)
10 more sources
VVulDB Updates3 hours agoCVE-2026-25784 | Hallo Welt! BlueSpice up to 5.2.6 Token Authenticator LocalSettings.php mwsgTokenAuthenticatorServiceCIDR default permission (EUVD-2026-108653) VVulDB Updates3 hours agoCVE-2026-25716 | Hallo Welt! BlueSpice up to 5.1.10/5.2.6 UserManager create unblockUser improper authorization (EUVD-2026-108651) VVulDB Updates2 hours agoCVE-2026-114406 | Red Hat Satellite 6 ca-certificates certificate validation (EUVD-2026-107565) VVulDB Updates2 hours agoCVE-2026-105963 | elixir-plug plug/plug_crypto Plug.Crypto.verify/Plug.Crypto.secure_compare information disclosure (EUVD-2026-108666) VVulDB Updates2 hours agoCVE-2026-89320 | Eclipse KeyPont HmacShaCryptor.Hash data authenticity (EUVD-2026-108654) VVulDB Updates1 hour agoCVE-2026-113401 | Mozilla Firefox up to 158.0.0 PDF Viewer denial of service (WID-SEC-2026-4064)
+4
8 sources
CVE-2025-30051 | CGM CLININET up to 2026.MS2 Configuration File SysIO.pl permission (EUVD-2025-211181)
7 more sources
VVulDB Updates3 hours agoCVE-2025-30049 | CGM CLININET up to 2026.MS3 weak password hash (EUVD-2025-211179) VVulDB Updates3 hours agoCVE-2025-30047 | CGM CLININET up to 2026.MS2 deserialization (EUVD-2025-211178) VVulDB Updates3 hours agoCVE-2025-30050 | CGM CLININET up to 2026.MS2 RunCGI RunCGI.pm os command injection (EUVD-2025-211180) VVulDB Updates3 hours agoCVE-2025-30045 | CGM CLININET up to 2026.MS3 ConvExpr code injection (EUVD-2025-211176) VVulDB Updates3 hours agoCVE-2025-30046 | CGM CLININET up to 2026.MS3 HL7 Communication privileges management (EUVD-2025-211177) VVulDB Updates3 hours agoCVE-2025-30043 | CGM CLININET up to 2026.MS2 missing authentication (EUVD-2025-211175)
+1
8 sources
How to watch The Northumbria Mysteries for free, online and from anywhere
7 more sources
LLatest from TechRadar3 hours agoHow to watch Chaar Yaar online – stream the Hindi crime series from anywhere for free LLatest from TechRadar3 hours agoHow to watch Kon Yashwant Pansare online from anywhere LLatest from TechRadar3 hours agoHow to watch Aryabhatt Ka Zero online from anywhere LLatest from TechRadar2 hours agoHow to watch Kinare Kinare online from anywhere LLatest from TechRadar2 hours agoHow to watch Maa Inti Bangaaram online from anywhere LLatest from TechRadar2 hours agoHow to watch Mercury Music Prize for free – stream full replay
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4283790/cyber-security-bulletins/ghostaction-hackers-inject-malicious-security-workflows-into-790-github-repositories/