Cyber Attacks
GhostAction Attack Compromises 346 GitHub Repos via Hijacked Maintainer Accounts
Threat actors used stolen maintainer credentials to inject malicious workflows into hundreds of repositories, stealing secrets and cloud keys.
GhostAction
Everything Threat Times has reported about GhostAction: 3 stories, newest first. Part of our Cyber Attacks coverage.
Cyber Attacks
GhostAction Hackers Compromise 500+ GitHub Accounts to Steal API Credentials
A new campaign by GhostAction has expanded to over 500 compromised accounts, injecting malicious workflows into tens of thousands of repositories since October 2026.
Cloud Security
GhostAction Campaign Targets Hundreds of GitHub Repos for Cloud and AI Credentials
Socket research reveals a new wave of the GhostAction malware campaign stealing cloud and AI credentials from hundreds of GitHub repositories.