GitHub Actions Compromised to Exfiltrate CI/CD Credentials
Threat actors hijacked a popular GitHub Actions workflow, redirecting all tags to an imposter commit to harvest CI/CD credentials. Review CI workflows and revoke compromised tokens.
§Topic · APT & Threat Actors
APT & Threat Actors
Nation-state threat actors, APT groups, and targeted campaigns by advanced persistent adversaries.
All dispatchesWednesday, May 20