SecurityThe Hacker Newsabout 2 hours ago
GhostAction Compromises 1,900 GitHub Accounts
2 min read
GhostAction, a credential-theft campaign, compromised about 1,900 GitHub accounts targeting over 30,000 repositories on October 8 and 9, 2026. Security researchers Gaetan Ferry and Guillaume Valadon reported the attack attempted to extract 3,174 secrets from public repositories. While the initial wave succeeded, GitHub started preventing the malicious workflow from running starting October 9, stopping subsequent waves from extracting secrets.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGitHub
