GLOBAL CYBERSECURITY BULLETIN — Cloud security researchers have uncovered and disrupted a sprawling, highly automated campaign that systematically targeted thousands of GitHub repositories. Dubbed "Gheist," the operation utilized stolen access tokens to plant malicious, secret-stealing GitHub Actions workflows across more than 13,500 individual branches. The campaign underscores a dangerous evolution in software supply chain attacks, […]

