EventCybersecurityOctober 15, 2026

GhostAction campaign hijacked 1,900 GitHub accounts to hit 30,000 repos

Read original source →thenewstack.io

Attackers used the compromised accounts to inject credential-stealing GitHub Actions workflows into over 30,000 repositories, targeting CI/CD secrets, cloud access keys, and AI provider API keys. GitGuardian tracked the campaign.

1 source

More stories today

Open the live feed