New GhostAction Attack Compromises Hundreds of GitHub Repos to Steal Secrets
09/10/2026-19:38 09/10/2026-19:40 מחשבים וטכנולוגיה Cyber Security News דיווח
A new GhostAction campaign has compromised 346 GitHub repositories after threat actors used two hijacked maintainer accounts to add a fake “security audit” workflow designed to steal CI/CD secrets, cloud keys, API tokens, and credentials stored in so
