The Hacker News · 11/12/2026

Attackers Exploit 4,837 Hijacked GitHub Accounts to Deploy CI Secret Stealer Across 1,806+ Repositories

Mass GitHub account compromise used to inject secret stealer malware into CI/CD pipelines across 1,806+ repositories, stealing API keys and cloud credentials.

Read original coverage