GitHub CI Secret-Stealing Campaign: What to Audit and Revoke Now
A compromised GitHub account can become a route into cloud infrastructure—not just a source of unwanted commits. The Hacker News reports that an attacker used 4,837 hijacked accounts to deploy a CI secret stealer, with execution observed in...