SPIN Unprocessed October 26, 2026 ai_technology cybersecurity
Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
View original on thehackernews.comOverview
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. The attacks have succeeded in private repositories and GitHub Enterprise environments, according to an analysis by cloud security company Wiz. A GitHub safeguard that pauses
SpinGraph analysis pending — check back after processing.
Ask AI about this story
Opens with the SpinGraph .md URL and structured context — one click, prompt included.
More from The Hacker News
View all →- Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
- ⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More
- Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
- Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
- Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
Markdown (.md) · JSON-LD schema (.json) · Machine-readable for AI & GEO