GhostAction Campaign Compromises Thousands of GitHub Accounts

The GhostAction credential-theft campaign has compromised nearly 1,900 GitHub accounts, impacting over 30,000 repositories. Attackers targeted public CI/CD pipelines to harvest hardcoded secrets and access tokens. Security teams should immediately audit repository secrets and account access logs.