Tag: GhostAction

  • GhostAction GitHub Supply Chain Attack Exposes 3,325 Secrets

    GhostAction GitHub Supply Chain Attack Exposes 3,325 Secrets

    The GhostAction GitHub supply chain attack has drawn global attention. Researchers revealed that hackers exploited GitHub Actions workflows to steal 3,325 secrets from 817 repositories. The campaign affected 327 developers and compromised critical tokens, highlighting the risks of insecure CI/CD pipelines. How the Attack Worked The attack surfaced in early September 2025 when investigators discovered…