15 October 2026 - 12:20

Category: IT Fail

Splendid, 1,900 More GitHub Victims

GhostAction nicked credentials from nineteen hundred GitHub accounts across thirty thousand repositories. Just another Tuesday of watching developers lose their keys.

Splendid, 1,900 More GitHub Victims. GhostAction nicked credentials from nineteen hundred GitHub accounts across thirty thousand repositories. Just another Tuesday of watching developers lose their keys.

Source: The Hacker News

The Full Story

Severity: High Mood: Frustrating

Here we go again, as the GhostAction credential-theft campaign cheerfully walked off with nineteen hundred GitHub accounts, ensnaring three thousand unlucky users and organisations across thirty thousand repositories. Same story different day, leaving IT to wonder why anyone bothers storing secrets when credential thieves simply help themselves. Defending against such rampant credential theft means enduring the joy of locking down targeted repositories before another spike hits our miserable desk.

#PatchNothing #SameStory
Open article →