TGViewer
Security Harvester Security Harvester @secharvester · 10.1K subscribers
Post #23600 50
GhostAction campaign: new spike in malicious workflows
https://blog.gitguardian.com/ghostaction-github-actions-supply-chain-attack-returns/

@secharvester
GitGuardian Blog - Take Control of Your Secrets Security GhostAction Returns: 772 Repos Hit in New GitHub Actions Wave The GhostAction supply chain campaign hit 772 public GitHub repositories between August 31 and September 30, 2026, targeting 2,577 secrets with the same injected workflow we documented last year.
Open in Telegram All posts from @secharvester
More from @secharvester
  1. Oct 7, 2026Chrono Mock: Manipulate time/date in Windows Apps (C/C++/C#/.bat/WebView/Electron) and ton…
  2. Oct 7, 2026Rebuilding Moonstone (1991) from 68k machine code into readable, moddable C++ for the Amig…
  3. Oct 7, 2026Hackers obtain counterfeit TLS certificates for Google and other large services | Compromi…
  4. Oct 7, 2026Double Counter just got breached https://www.talkesport.com/news/double-counter-data-breac…
  5. Oct 7, 2026PoeLLM malware has assembled a sweeping botnet, taking technical cues from a poem https://…
  6. Oct 7, 2026Breaking Down Appsec Part 7: That Was Easy (Testing) https://pigeonlabs.ai/blog/breaking-d…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →