GhostAction targets 30,000 GitHub repositories in a new spike

GhostAction targeted more than 30,000 GitHub repositories in a burst on October 8–9, after the campaign had already spread malicious GitHub Actions across tens of thousands of repositories. The latest wave used about 1,900 compromised accounts and attempted to extract 3,174 secrets. GitHub began blocking the malicious workflows on October 9.
Source

👉@sysadminoff

https://4sysops.com/archives/ghostaction-targets-30000-github-repositories-in-a-new-spike/