NewsDark Reading
'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets
Teaser from the source
An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Dark ReadingMore on GitHub
Other advisories
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-63209CVE-2026-63209 in github.com/klauspost/compress - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-GHSA-h7wr-284f-5qvcGHSA-h7wr-284f-5qvc in github.com/labstack/echo/v4 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-GHSA-cxf3-9h37-7rr8GHSA-cxf3-9h37-7rr8 in github.com/labstack/echo/v4 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-GHSA-f48p-c9v4-h7xvGHSA-f48p-c9v4-h7xv in github.com/labstack/echo/v4 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-GHSA-9969-6676-49h5GHSA-9969-6676-49h5 in github.com/labstack/echo/v4 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-53492CVE-2026-53492 in github.com/containerd/containerd/v2 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-53714CVE-2026-53714 in github.com/envoyproxy/gateway - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-46385CVE-2026-46385 in github.com/hamba/avro/v2 - Patched by Root
Other news entries
- Hugging Face malware campaign returns to hijack GPUs for crypto miningNewsBleepingComputer
- Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto MinersNewsThe Hacker News
- Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hourNewsThe Register — Security
- Gut getarnt: Automatisch startender Wurm bei GitHub ist schwer zu findenNewsheise Security
- GitHub Launches npm Firewall to Block Malicious Packages Before InstallationNewsThe Hacker News
- GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHubNewsDark Reading
- Gheist turns GitHub Actions into a secret extraction serviceNewsCSO Online
- Attackers compromised 42 GitHub repositories by using files too large to be searchedNewsCSO Online
Source: https://www.darkreading.com/cyberattacks-data-breaches/gheist-stolen-github-tokens-cloud-secrets
ID