Hijacked GitHub Accounts Put GitHub Actions Secrets at Risk

Someone managed to use stolen developer and bot accounts to fetch build credentials through ordinary-looking GitHub pull requests. The activity started on November 10, 2026, and two days later, security researchers from Aikido and StepSecurity uncovered the details of the campaign in their blog posts.LinuxSecurity – Security ArticlesRead More