🛑 GhostAction attackers compromised about 1,900 GitHub accounts and targeted 30,000+ repositories with malicious GitHub Actions workflows designed to steal CI/CD secrets.

They attempted to extract 3,174 secrets. GitHub blocked later attack waves.

Read → https://thehackernews.com/2026/10/ghostaction-compromises-about-1900.html