News
GHEIST Attack Uses Stolen GitHub Tokens to Harvest Secrets
Attackers leveraged tokens from over 850 GitHub accounts to create malicious workflow runs that exfiltrated secrets, evaded log masking, and deleted logs. Private repos and self‑hosted runners were affected; defenders should hunt for suspicious branches and rotate credentials.