Hackers Turned GitHub Against Its Own Users | Threat Wire

Hackers Turned GitHub Against Its Own Users | Threat Wire

MediaVideo
Yanac

How are hackers exploiting GitHub Actions to steal credentials and secrets from hundreds of repositories in a growing supply chain attack? This week on Hak5, we investigate the GhostAction campaign, Anthropic’s new AI vulnerability scanner, and Wikipedia’s accusations against OpenAI agents. Plus, major changes to Let’s Encrypt TLS certificates, a critical GitLab security flaw, and the latest cybersecurity news, ransomware attacks, and cybercrime arrests.

⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️

@endingwithali →
Twitch: https://twitch.tv/endingwithali
Twitter: https://twitter.com/endingwithali
YouTube: https://youtube.com/@endingwithali
Everywhere else: https://links.ali.dev

Want to work with Ali? hak5@endingwithali.com

[❗] Join the Patreon→ https://patreon.com/threatwire

LINKS
🔗 Story 1:
https://blog.gitguardian.com/ghostaction-github-actions-supply-chain-attack-returns/
https://socket.dev/blog/ghostaction-cloud-credentials
https://thehackernews.com/2026/10/credential-stealing-github-actions.html
🔗 Story 2:
https://thehackernews.com/2026/10/anthropic-expands-claude-access-for.html
https://www.sec.gov/files/33-11216-fact-sheet.pdf
https://www.yahoo.com/news/politics/articles/exclusive-anthropic-breaches-spark-white-224721423.html
https://www.axios.com/2026/10/09/anthropic-ai-security-white-house
https://wikimediafoundation.org/news/2026/10/05/openai-rogue-agent-activities-found-on-wikimedia-projects/
http://red.anthropic.com/oss-scanner/
🔗 Story 3: Let’s Encrypt is Changing
https://linuxiac.com/lets-encrypt-to-cut-ssl-certificate-lifetimes-to-64-days-in-february-2027/
🔗 Story 4: BSides News
https://www.bleepingcomputer.com/news/security/engineer-sentenced-for-locking-thousands-of-devices-on-employer-network/
https://www.bleepingcomputer.com/news/security/musician-gets-18-months-in-prison-for-10-million-streaming-fraud-using-ai-bots/
https://cyberscoop.com/edward-dubrovsky-cypfer-arrested-fbi-extortion-charges/
https://www.justice.gov/opa/pr/known-cybersecurity-expert-and-owner-florida-ransomware-remediation-company-charged
https://www.bleepingcomputer.com/news/security/cyberattack-shuts-down-refrigerators-at-french-supermarkets/
https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/
https://cyberscoop.com/flock-cve-numbering-authority-cna/
—–☆—–☆—–☆—–☆—–☆—–☆—–☆—–☆—–☆—–☆
Our Site → https://www.hak5.org
Shop → http://hakshop.myshopify.com/
Community → https://www.hak5.org/community
Subscribe → https://www.youtube.com/user/Hak5Darren?sub_confirmation=1
Support → https://www.patreon.com/threatwire
Contact Us → http://www.twitter.com/hak5
____________________________________________

Founded in 2005, Hak5’s mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community – where all hackers belong.Hak5Read More