A threat actor dubbed Gheist is turning compromised GitHub accounts into credential-harvesting platforms. By planting malicious GitHub Actions workflows in private repositories, attackers can expose repository and environment secrets, then retrieve them through GitHub APIs before deleting evidence of the activity. Tracked since September 15 by Wiz... Weiterlesen: Gheist turns GitHub Actions into a secret extraction service
Intelligence View
⚡ tsecurity.de Intelligence
Gheist turns GitHub Actions into a secret extraction service
A threat actor dubbed Gheist is turning compromised GitHub accounts into credential-harvesting platforms. By planting malicious GitHub Actions workflows in…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest - bezpłatnie Codziennie najważniejsze wiadomości bezpieczeństwa · można pobrać w każdej chwili
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Brak recenzji czytelników
Czy ta strona była pomocna?
0
Powered by tsecurity.de
tsecurity.de Hub
Powiązany klaster opowieści i źródła (wektor AI)
13 źródeł
Amazon stellt drei neue Echo-Lautsprecher vor
12 kolejnych źródeł
RSS- Futurezonevor 1 Std.Von LG: WLAN-Lautsprecher jetzt stark reduziert bei Amazon – 20 % Rabatt CCaschys Blogvor 4 Std.Amazon Echo Dot: Neuauflage mit Smart-Home-Hub und eero-Extender CCaschys Blogvor 4 Std.Amazon Echo Time: Smarter Wecker fürs Schlafzimmer vorgestellt CCaschys Blogvor 4 Std.Amazon Echo Studio: Neuer Spitzen-Lautsprecher bekommt eine Home-Kamera CCaschys Blogvor 3 Std.Amazon: Echo Show 16 und Alexa Photo Frame vorgestellt ZZDNETvor 1 Std.Amazon’s new Echo Dot can turn into a Wi-Fi extender – how it works
+6
11 źródeł
Sony Data Breach Exposes 2.58 Million Customer Records and 54,401 Email Credentials
10 kolejnych źródeł
TThe Cyber Expressvor 8 Std.Australian Data Breach Incidents Up 66% as AI Sharpens Scams CCybersafe Newsvor 5 Std.Significant Data Breach at GMO Internet: What's at Stake? CCybersafe Newsvor 5 Std.Sony Data Breach Exposes Over 2.5 Million Customer Records GGBHackers Securityvor 4 Std.Sony Data Breach Exposes 2.58 Million Customer Records and 54,401 Email Credentials CCyber Security Newsvor 6 Std.Sony Data Breach Exposes 2.58 Million Customer Records, Including 54,401 Email Passwords CCyber Security Newsvor 6 Std.Coinbase Customer Data Exposed Via Analytics Vendor Amplitude Security Incident
+4
10 źródeł
CVE-2026-20090 | Cisco Enterprise NFV Infrastructure Software Web-based Management Interface cross site scripting (cisco-sa-cimc-xss-A2tkgVAB)
9 kolejnych źródeł
VVulDB Updatesvor 4 Std.CVE-2026-20089 | Cisco Enterprise NFV Infrastructure Software Web-based Management Interface cross site scripting (cisco-sa-cimc-xss-A2tkgVAB) VVulDB Updatesvor 4 Std.CVE-2026-20088 | Cisco Enterprise NFV Infrastructure Software Web-based Management Interface cross site scripting (cisco-sa-cimc-xss-A2tkgVAB) VVulDB Updatesvor 4 Std.CVE-2026-20087 | Cisco Enterprise NFV Infrastructure Software Web-based Management Interface cross site scripting (cisco-sa-cimc-xss-A2tkgVAB) VVulDB Updatesvor 4 Std.CVE-2026-20085 | Cisco Enterprise NFV Infrastructure Software Web-based Management Interface cross site scripting (cisco-sa-cimc-xss-A2tkgVAB) VVulDB Updatesvor 3 Std.CVE-2026-20151 | Cisco Smart Software Manager On-Prem up to 9-202510 Web Interface insertion of sensitive information into sent data (cisco-sa-cssm-priv-esc-xRAnOuO8) VVulDB Updatesvor 3 Std.CVE-2026-20096 | Cisco Enterprise NFV Infrastructure Software Web-based Management Interface command injection (cisco-sa-cimc-cmd-inj-3hKN3bVt)
+3
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/pl/4303062/bezpieczne-programowanie/gheist-turns-github-actions-into-a-secret-extraction-service/