Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
New GhostAction Attack Compromises Hundreds of GitHub Repos to Steal Secrets
A new GhostAction campaign has compromised 346 GitHub repositories after threat actors used two hijacked maintainer accounts to add a fake “security audit” workflow designed to steal CI/CD secrets, cloud keys, API tokens, and credentials stored in source-code history. Security firm Socket reported that the October 8 activity affected repositories connected to the GitHub accounts […] The post New GhostAction Attack Compromises Hundreds of GitHub Repos to Steal Secrets appeared first on Cyber Security News.
A new GhostAction campaign has compromised 346 GitHub repositories after threat actors used two hijacked maintainer accounts to add a fake “security audit” workflow designed to steal CI/CD secrets, cloud keys, API tokens, and credentials stored in source-code history. Security firm Socket reported that the October 8 activity affected repositories connected to the GitHub accounts henrywoo and kitao. The targets include Uber’s uber/athenadriver repository and the popular kitao/pyxel project, which has more…
Excerpt shown under the publisher's RSS terms · 72 words · full text and figures are on the publisher's site
Related coverage
Brief independent investigation of agents’ behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incident
METR · Aug 26, 2026
GhostAction Supply Chain Campaign Uses Malicious GitHub Actions to Steal CI/CD Credentials
Cybersecurity News · Oct 8, 2026
The FulcrumSec playbook: How to detect and stop the group behind the Novo Nordisk breach
Sysdig Blog · Jun 25, 2026
Protecting your Supabase projects from npm supply chain attacks
Supabase · May 26, 2026