/
initial_access_vector:compromised_accounts × criticity:high × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · high

GhostAction campaign injects credential-stealing GitHub Actions workflows into 790 repositories via hijacked maintainer accounts

GhostAction has returned with an expanded credential-theft operation. By October 9, 2026, attackers had injected malicious GitHub Actions workflows into 790 repositories, according to OpenSourceMalware's validated total. The campaign was first documented by GitGuardian in 2025 (817 repositories, 3,325 stolen secrets). It relies on comprom…

GhostAction technology software development
recordedfuture.com · high

TAG-193 Espionage Campaign Targets Central Asian and CIS Governments with Spearphishing, WinRAR CVE-2025-8088 and Reverse Shells

Recorded Future's Insikt Group reports on TAG-193, a cluster that ran a sustained intelligence-collection campaign against government bodies from early 2025 through May 2026. Targets include diplomacy, economic development, agriculture and environmental agencies in Russia, Tajikistan, Belarus, Armenia and Uzbekistan. Lure documents and im…

CVE-2025-8088 TAG-193 Silent Lynx government diplomacy