Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
Publié le
Par The Hacker News
GHEIST USES STOLEN GITHUB TOKENS TO STEAL PRIVATE REPOSITORY SECRETS VIA ACTIONS LOGS
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. The attacks have succeeded in private repositories and GitHub Enterprise environments, according to an an
IMPACTS POUR LES ORGANISATIONS
- ▸Compromission des identités et accès non autorisés aux ressources cloud.
- ▸Exposition des données hébergées et violation de la conformité.
- ▸Propagation latérale au sein de l'infrastructure cloud.
▶ RENFORCEMENT DE LA GOUVERNANCE DES ACCÈS ET ACTIVATION DE LA MFA
Source : The Hacker News
SECURITRUST
Source
Article original publié par The Hacker News : Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs