Topic
Gheist
Latest news
- 26 OctGheist campaign uses stolen GitHub tokens to exfiltrate repo secrets
An automated campaign called Gheist uses stolen GitHub tokens to push workflows that print private repository secrets into GitHub Actions logs, which attackers download before deleting the runs. Cloud security firm Wiz has tracked the activity since September 15 and recovered more than 13,500 planted branches from over 850 compromised accounts, affecting private repos and GitHub Enterprise environments.
Security · 1 source
Articles
No articles about Gheist yet.