GhostAction attack has breached ~1,900 GitHub accounts, infecting repos with secret-stealing workflows. #GitHub #SupplyChain #GhostAction #Security #CI/CD #CloudCredentials https://thedailytechfeed.com/ghostaction-attack-compromises-1900-github-accounts-hits-30000-repositories/

The GhostAction campaign hit over 30,000 repositories, compromising 1,900 accounts to inject malicious automation workflows designed to harvest cloud credenti…

https://en.hacks.gr/megali-epithesi-sto-github-chtypise-chiliades-logariasmoys-kai-erga-programmatiston/

#GhostAction #GitHub #GitGuardian

GhostAction is back: fake "Security Audit" workflows hit 345 GitHub repos on Oct 8 and now harvest secrets from the full git history. Deleted keys count too. Search for the workflow, rotate everything. #GhostAction #CyberSecurity

🇬🇧 diesec.com/2026/10/ghos...
🇩🇪 diesec.com/de/2026/10/g...

The GhostAction attack compromised developer accounts on GitHub, injecting malicious scripts to steal API keys and secrets in a major supply chain attack.

#GitHub #GhostAction #Cybersecurity #SupplyChainAttack #DataBreach

GhostAction's fake 'security audit' workflows now mine entire git history for secrets. https://intel.threadlinqs.com/threat/TL-2026-3157 #ThreatIntel #xmrig #GhostAction #GitHub

Socket says more than 500 GitHub accounts added a malicious file across tens of thousands of repositories.

It searches project history too, incl…

https://en.hacks.gr/kampania-sto-github-kryvei-archeia-poy-klevoyn-stoicheia-prosvasis-apo-dekades-chiliades-erga/

#GitHub #GhostAction #SecretScanning

GhostAction compromise hits 346 GitHub repos—steals secrets from workflows & history. #GhostAction #GitHub #Security #CI/CD #SupplyChain #Leaks https://thedailytechfeed.com/ghostaction-attack-hits-346-github-repos-exposes-ci-cd-secrets/

GhostAction affected 346 GitHub projects, Socket reports.

A fake security-check workflow ran when developers uploaded code, colle…

https://en.hacks.gr/i-ghostaction-prosthese-se-346-erga-sto-github-pseytiko-elegcho-poy-mporoyse-na-sygkentronei-stoicheia-prosvasis/

#GhostAction #GitHub #OpenSource

@socket.dev
Malicious workflows steal CI secrets and cloud credentials from working trees and full Git history.
-
IOCs: 193[.]32[.]204[.]199
-
#GhostAction #SupplyChain #ThreatIntel

GhostAction added deceptive automation files to 772 public GitHub projects.

GitGuardian says 26 credentials were stolen from 13 projects.

By Oct.

5, only 124 pr…

https://en.hacks.gr/i-kampania-ghostaction-eklepse-26-stoicheia-prosvasis-apo-13-erga-sto-github/

#GitHub #GhostAction #GitHubActions

GhostAction targets 772 GitHub repos, steals SSH, cloud & API credentials via fake Actions workflows. #SupplyChain #GitHubActions #GhostAction #CI/CD #DevSecOps #SecurityNews https://thedailytechfeed.com/ghostaction-supply-chain-campaign-steals-ci-cd-secrets-via-malicious-github-actions/