1 post
The GhostAction campaign injects fake security-audit workflows into GitHub repos to exfiltrate secrets from Actions settings and full git history.