An automated campaign dubbed Gheist uses compromised GitHub tokens to inject workflows that expose repository secrets in GitHub Actions logs. The threat actors download these logs and delete the runs afterward, successfully breaching private repositories and enterprise environments.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →