How are hackers exploiting GitHub Actions to steal credentials and secrets from hundreds of repositories in a growing supply chain attack? This week on Hak5, we investigate the GhostAction campaign, Anthropic’s new AI vulnerability scanner, and Wikipedia’s accusations against OpenAI agents. Plus, major changes to Let’s Encrypt TLS certificates, a critical GitLab security flaw, and the latest cybersecurity news, ransomware attacks, and cybercrime arrests.
⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️
@endingwithali →
Twitch: https://twitch.tv/endingwithali
Twitter: https://twitter.com/endingwithali
YouTube: https://youtube.com/@endingwithali
Everywhere else: https://links.ali.dev
Want to work with Ali? [email protected]
[❗] Join the Patreon→ https://patreon.com/threatwire
LINKS
🔗 Story 1:
https://blog.gitguardian.com/ghostaction-github-actions-supply-chain-attack-returns/
https://socket.dev/blog/ghostaction-cloud-credentials
https://thehackernews.com/2026/10/credential-stealing-github-actions.html
🔗 Story 2:
https://thehackernews.com/2026/10/anthropic-expands-claude-access-for.html
https://www.sec.gov/files/33-11216-fact-sheet.pdf
https://www.yahoo.com/news/politics/articles/exclusive-anthropic-breaches-spark-white-224721423.html
https://www.axios.com/2026/10/09/anthropic-ai-security-white-house
https://wikimediafoundation.org/news/2026/10/05/openai-rogue-agent-activities-found-on-wikimedia-projects/
http://red.anthropic.com/oss-scanner/
🔗 Story 3: Let’s Encrypt is Changing
https://linuxiac.com/lets-encrypt-to-cut-ssl-certificate-lifetimes-to-64-days-in-february-2027/
🔗 Story 4: BSides News
https://www.bleepingcomputer.com/news/security/engineer-sentenced-for-locking-thousands-of-devices-on-employer-network/
https://www.bleepingcomputer.com/news/security/musician-gets-18-months-in-prison-for-10-million-streaming-fraud-using-ai-bots/
https://cyberscoop.com/edward-dubrovsky-cypfer-arrested-fbi-extortion-charges/
https://www.justice.gov/opa/pr/known-cybersecurity-expert-and-owner-florida-ransomware-remediation-company-charged
https://www.bleepingcomputer.com/news/security/cyberattack-shuts-down-refrigerators-at-french-supermarkets/
https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/
https://cyberscoop.com/flock-cve-numbering-authority-cna/
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.org
Shop → http://hakshop.myshopify.com/
Community → https://www.hak5.org/community
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.
⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️
@endingwithali →
Twitch: https://twitch.tv/endingwithali
Twitter: https://twitter.com/endingwithali
YouTube: https://youtube.com/@endingwithali
Everywhere else: https://links.ali.dev
Want to work with Ali? [email protected]
[❗] Join the Patreon→ https://patreon.com/threatwire
LINKS
🔗 Story 1:
https://blog.gitguardian.com/ghostaction-github-actions-supply-chain-attack-returns/
https://socket.dev/blog/ghostaction-cloud-credentials
https://thehackernews.com/2026/10/credential-stealing-github-actions.html
🔗 Story 2:
https://thehackernews.com/2026/10/anthropic-expands-claude-access-for.html
https://www.sec.gov/files/33-11216-fact-sheet.pdf
https://www.yahoo.com/news/politics/articles/exclusive-anthropic-breaches-spark-white-224721423.html
https://www.axios.com/2026/10/09/anthropic-ai-security-white-house
https://wikimediafoundation.org/news/2026/10/05/openai-rogue-agent-activities-found-on-wikimedia-projects/
http://red.anthropic.com/oss-scanner/
🔗 Story 3: Let’s Encrypt is Changing
https://linuxiac.com/lets-encrypt-to-cut-ssl-certificate-lifetimes-to-64-days-in-february-2027/
🔗 Story 4: BSides News
https://www.bleepingcomputer.com/news/security/engineer-sentenced-for-locking-thousands-of-devices-on-employer-network/
https://www.bleepingcomputer.com/news/security/musician-gets-18-months-in-prison-for-10-million-streaming-fraud-using-ai-bots/
https://cyberscoop.com/edward-dubrovsky-cypfer-arrested-fbi-extortion-charges/
https://www.justice.gov/opa/pr/known-cybersecurity-expert-and-owner-florida-ransomware-remediation-company-charged
https://www.bleepingcomputer.com/news/security/cyberattack-shuts-down-refrigerators-at-french-supermarkets/
https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/
https://cyberscoop.com/flock-cve-numbering-authority-cna/
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → https://www.hak5.org
Shop → http://hakshop.myshopify.com/
Community → https://www.hak5.org/community
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.