Back to all news
Security

GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories

The Hacker News·October 15, 2026·1 min read
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories

The credential-theft campaign GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, observed on October 8 and 9, 2026, resulted from compromising about 1,900 GitHub accounts and attempted to extract 3,174 secrets from public repositories' CI, according to GitGuardian.

Read at The Hacker News
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store