Mobile Security & Privacy GhostAction Campaign Strikes Again: High-Profile Open-Source Accounts Compromised to Push Malicious GitHub Workflows October 9, 2026 Ali Ikhwan Cybersecurity researchers have uncovered alarming new details regarding an ongoing credential-theft campaign known as GhostAction, which has successfully compromised high-profile open-source maintainer accounts to propagate malicious workflows across tens of…
