GhostAction

Everything Shell Bulletin has reported about GhostAction: 2 stories, newest first. Part of our Cyber Attacks coverage.

Cyber Attacks

Audit GitHub Actions Workflows After GhostAction Injects Malicious Security Scripts

Attackers compromised developer accounts to inject credential-stealing workflows into hundreds of repositories, targeting stored secrets and historical code data.

Oct 20, 2026

Cyber Attacks

Audit GitHub Actions Secrets After GhostAction Campaign Compromises 500 Accounts

Attackers injected malicious workflows into thousands of repositories to steal cloud and AI credentials, targeting small business developers.

Oct 11, 2026