Cyber Attacks
GhostAction Attack Compromises 346 GitHub Repos via Hijacked Maintainer Accounts
Threat actors used stolen maintainer credentials to inject malicious workflows into hundreds of repositories, stealing secrets and cloud keys.
Socket
Everything Threat Times has reported about Socket: 5 stories, newest first. Part of our Cyber Attacks coverage.
Cyber Attacks
GhostAction Hackers Compromise 500+ GitHub Accounts to Steal API Credentials
A new campaign by GhostAction has expanded to over 500 compromised accounts, injecting malicious workflows into tens of thousands of repositories since October 2026.
Cloud Security
GhostAction Campaign Targets Hundreds of GitHub Repos for Cloud and AI Credentials
Socket research reveals a new wave of the GhostAction malware campaign stealing cloud and AI credentials from hundreds of GitHub repositories.
AI
arXiv imposes monthly submission limits to curb AI-generated paper flood
The preprint server restricts authors to two submissions per month as automated content overwhelms moderation teams and delays legitimate research.
Cyber Attacks
Compromised tensorlake npm package delivers Shai-Hulud credential-stealing worm
The tensorlake TypeScript SDK was hijacked in a supply chain attack, with version 0.5.144 distributing malware that steals credentials and executes remote code.