Skip to content

News / Archive

News

Gheist campaign abuses stolen GitHub tokens

Automated attack inserts secret‑dumping workflows in repos, affecting over 850 accounts since Sep 15; GitHub’s new security controls block public repos but private/enterprise remain at risk.

More News