News
Gheist Uses Stolen GitHub Tokens to Exfiltrate Repository Secrets via Actions Logs
Attackers employed stolen GitHub tokens to create malicious workflows that log repository secrets, which are then downloaded before the runs are deleted.
More News
- Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
- uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts
- Microsoft 365 Token‑Replay Attacks Compromise 97 Accounts at 79 Organizations
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
- Fed Meeting Faces Inflation Data Uncertainty