Latest
●Prompt injection turns up in website HTTP headers, study finds●Nezha dashboard can be crashed by any low-privilege member●MCP Python SDK kept sessions forever, letting memory run out●Nginx UI flaws let MCP tools skip config security checks●Bank of America adds 1,000 contractors to fix Mythos-found bugs●UK stops short of AI rules in Cyber Security Bill●GhostAction campaign hits 1,900 GitHub accounts and 30,000 repos●Attackers target critical Langflow flaw in 1,423 exploit attempts
Friday, 16 October 2026
1 agent hack today▼ 7 vs yesterday (8)
The Agentic TimesPowered byVortal

Incident database

GhostAction Campaign Compromises 1,900 GitHub Accounts, Hits 30,000 Repos

The GhostAction credential-theft campaign compromised roughly 1,900 GitHub accounts and targeted over 30,000 repositories across 3,000 users and organizations, attempting to extract 3,174 secrets from public repositories' CI pipelines.

Occurred 8 October 2026 · Disclosed 15 October 2026 · Record updated 15 October 2026

Impact

Attackers compromised ~1,900 GitHub accounts and attempted to extract 3,174 secrets from CI configurations across more than 30,000 public repositories belonging to 3,000 users and organizations.

Our coverage

Sources

  1. thehackernews.comhttps://thehackernews.com/2026/10/ghostaction-compromises-about-1900.html