Get the latest tech news
Gheist campaign plants secret-dumping workflows using stolen GitHub tokens
An automated campaign is planting secret-dumping workflows in every repository that stolen GitHub tokens can reach. It uses no C2 server, is actively evolving, and has been significantly disrupted by recent GitHub security improvements.
None
Or read this on Hacker News
