highCyber Attacks
Gheist Threat Actor Weaponizes GitHub Tokens to Steal Cloud Secrets in Supply Chain Attack
Ongoing campaign targets developer repositories, harvesting credentials and sensitive data from thousands of GitHub projects.
Cyber.TechVoid1 min read
Key Takeaways
- Threat actor 'Gheist' is conducting an active supply chain attack targeting GitHub repositories.
- GitHub tokens are being weaponized to steal cloud secrets and sensitive data.
- Thousands of developer repositories are potentially impacted by the campaign.
- The attack poses significant risks to cloud infrastructure and software supply chain security.
Related Security News
highCyber Attacks
Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
Security researchers have identified a recurring social engineering pattern in which threat actors leverage Microsoft Teams' external chat creation feature to conduct impersonation scams and deliver malware or ransomware. The attacks involve the use of throwaway tenants and fake IT support identities to appear legitimate, targeting Microsoft Teams users globally. While the exact number of cases and specific threat actor groups remain unconfirmed, hundreds of incidents have been documented.
The Hacker News1 min read
