Threat Pulse 62High
GhostAction supply-chain attack far larger: 22,964 GitHub repos, 72,000+ commits, 1,792 accounts
Severity 7ActivereportedAI and software supply chainCloud and SaaS

Five payload families target CI/CD secrets, developer machines and cloud credentials; stolen GitHub tokens are still being reused.

· 8 days ago · thehackernews.com
Sourcesthehackernews.com
On X
@TheHackersNewsverifiedOct 28, 11:20 UTC

🚨 GhostAction supply-chain attacks are much bigger than initially reported. → 22,964 GitHub repositories targeted → 72,000+ malicious commits pushed → 1,792 accounts compromised → 5 payload families targeting CI/CD secrets, developer machines, and cloud crede

Open on X
Why this score

Plan rubric with caps (verified sweep, Oct 29)

Back to the board

Updated Nov 5, 01:46 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.