15 October 2026 - 12:20
Category: IT Fail
Splendid, 1,900 More GitHub Victims
GhostAction nicked credentials from nineteen hundred GitHub accounts across thirty thousand repositories. Just another Tuesday of watching developers lose their keys.
Source: The Hacker News
The Full Story
Here we go again, as the GhostAction credential-theft campaign cheerfully walked off with nineteen hundred GitHub accounts, ensnaring three thousand unlucky users and organisations across thirty thousand repositories. Same story different day, leaving IT to wonder why anyone bothers storing secrets when credential thieves simply help themselves. Defending against such rampant credential theft means enduring the joy of locking down targeted repositories before another spike hits our miserable desk.