2026年10月15日 4:45 ET 发布 · 更新于 1 个月前 · 1 个来源
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories
The Hacker News
·
原始报道
INFERY
The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, according to GitGuardian, was observed on October 8 and 9, 2026. "This resulted from compromising the GitHub accounts of about 1,900 users. It attempted to extract 3,174 secrets from public repositories' CI," security researchers Gaetan
原文