Hackers Used 4,837 Stolen GitHub Accounts to Probe 61,000-Plus Repositories and Drain CI Secrets From More Than 1,800 of Them
Aikido Security says a campaign it calls wfx-loot used 4,837 hijacked GitHub accounts to probe 61,764 repositories and run a CI secret stealer in more than 1,800 of them, with tricks built to survive key rotation. Here is how it worked and what businesses should check now.
Read more
