A campaign called GhostAction has placed malicious GitHub Actions workflows in 790 repositories, putting cloud credentials, software-publishing tokens, and AI service keys at risk. The total is OpenSourceMalware’s count of publicly recoverable, validated repositories through October 9, 2026; it is not a claim that every repository leaked... Weiterlesen: Hackers Hijack 790 GitHub Repositories to Steal Cloud Credentials and…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Hijack 790 GitHub Repositories to Steal Cloud Credentials and AI API Keys
A campaign called GhostAction has placed malicious GitHub Actions workflows in 790 repositories, putting cloud credentials, software-publishing tokens, and AI…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
44 Quellen
CVE-2026-90164 | Linux Kernel up to 7.2.5 ksmbd ksmbd_server_init allocation of resources (WID-SEC-2026-3444)
43 weitere Quellen
VVulDB Updates7 uur geledenCVE-2026-90166 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 ksmbd smb/server ksmbd_ipc_tree_connect_request null pointer dereference (WID-SEC-2026-3444) VVulDB Updates7 uur geledenCVE-2026-90165 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd ksmbd_stop_durable_scavenger null pointer dereference (WID-SEC-2026-3444) VVulDB Updates7 uur geledenCVE-2026-90168 | Linux Kernel up to 7.2.5 ksmbd ksmbd_free_work_struct improper synchronization (WID-SEC-2026-3444) VVulDB Updates7 uur geledenCVE-2026-90167 | Linux Kernel up to 7.2.5 ksmbd test_and_set_bit race condition (WID-SEC-2026-3444) VVulDB Updates7 uur geledenCVE-2026-90169 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd memory leak (WID-SEC-2026-3444) VVulDB Updates7 uur geledenCVE-2026-90170 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd ipc_validate_msg out-of-bounds (WID-SEC-2026-3444)
+37
14 Quellen
CVE-2025-64213 | StylemixThemes MasterStudy LMS Pro Plugin up to 4.7.16 on WordPress insertion of sensitive information into sent data
13 weitere Quellen
VVulDB Updates8 uur geledenCVE-2025-60182 | Schiocco Support Board Plugin up to 3.8.7 on WordPress cross site scripting VVulDB Updates8 uur geledenCVE-2025-64193 | 8theme XStore Plugin up to 9.6.1 on WordPress php file inclusion VVulDB Updates8 uur geledenCVE-2025-64376 | CridioStudio ListingPro Plugin up to 2.9.10 on WordPress cross site scripting VVulDB Updates8 uur geledenCVE-2025-64189 | 8theme XStore Core Plugin up to 5.6 on WordPress cross site scripting VVulDB Updates5 uur geledenCVE-2026-34885 | David Lingren Media LIbrary Assistant Plugin up to 3.34 on WordPress sql injection VVulDB Updates11 uur geledenCVE-2025-67526 | ThimPress Sailing Plugin up to 4.4.6 on WordPress php file inclusion
+7
8 Quellen
GitHub Release: cline/cline vdesktop-v0.0.49 (26.10.2026)
7 weitere Quellen
GGitHub5 uur geledenGitHub Release: cline/cline vsdk/shared/v0.2.0 (26.10.2026) GGitHub5 uur geledenGitHub Release: cline/cline vsdk/llms/v0.2.0 (26.10.2026) GGitHub5 uur geledenGitHub Release: cline/cline vsdk/agents/v0.2.0 (26.10.2026) GGitHub5 uur geledenGitHub Release: cline/cline vsdk/core/v0.2.0 (26.10.2026) GGitHub5 uur geledenGitHub Release: cline/cline vsdk/ui/v0.2.0 (26.10.2026) GGitHub5 uur geledenGitHub Release: cline/cline vsdk/sdk/v0.2.0 (26.10.2026)
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4284543/sichere-programmierung/hackers-hijack-790-github-repositories-to-steal-cloud-credentials-and-ai-api-keys/