Mon, Oct 26 brief Breaches and campaigns
Gheist campaign uses stolen GitHub tokens to dump secrets from private repos
Since Sep 15, Wiz has recovered more than 13,500 planted branches from over 850 compromised accounts, and GitHub’s approval hold stops the runs only in public repositories.