SecurityThe Hacker Newsabout 3 hours ago
GhostAction Compromises 500 GitHub Accounts
3 min read
Cybersecurity researchers disclosed that the GhostAction campaign compromised over 500 GitHub accounts by October 9, 2026, injecting malicious workflows into tens of thousands of repositories. The attack, active since October 7, 2026, exfiltrated 3,325 secrets including AWS keys and AI provider tokens from 817 repositories across 327 users, targeting 2,577 secrets total.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGitHub
