În afara temei aiqbench
Această știre a fost preluată de la o sursă pe care o urmărim, dar nu ține de domeniul AI sau cuantic, așa că nu există o perspectivă aiqbench pentru ea.
New GhostAction Attack Compromises Hundreds of GitHub Repos to Steal Secrets
A new GhostAction campaign has compromised 346 GitHub repositories after threat actors used two hijacked maintainer accounts to add a fake “security audit” workflow designed to steal CI/CD secrets, cloud keys, API tokens, and credentials stored in source-code history. Security firm Socket reported that the October 8 activity affected repositories connected to the GitHub accounts […] The post New GhostAction Attack Compromises Hundreds of GitHub Repos to Steal Secrets appeared first on Cyber Security News.
A new GhostAction campaign has compromised 346 GitHub repositories after threat actors used two hijacked maintainer accounts to add a fake “security audit” workflow designed to steal CI/CD secrets, cloud keys, API tokens, and credentials stored in source-code history. Security firm Socket reported that the October 8 activity affected repositories connected to the GitHub accounts henrywoo and kitao. The targets include Uber’s uber/athenadriver repository and the popular kitao/pyxel project, which has more…
Extras afișat conform termenilor RSS ai publicației · 72 cuvinte · textul integral și figurile sunt pe site-ul publicației
Subiecte conexe
Brief independent investigation of agents’ behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incident
METR · 26 aug. 2026
GhostAction Supply Chain Campaign Uses Malicious GitHub Actions to Steal CI/CD Credentials
Cybersecurity News · 8 oct. 2026
The FulcrumSec playbook: How to detect and stop the group behind the Novo Nordisk breach
Sysdig Blog · 25 iun. 2026
Protecting your Supabase projects from npm supply chain attacks
Supabase · 26 mai 2026