GhostAction — Cybersecurity News

Most Popular News

Top stories by views
Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials
1,758 views
CVE category

Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials

RedSide Security April 04, 2026
Read: Hackers Exploit CVE-2025-55182 to Breach…
Top 10 High-Risk Vulnerabilities Of 2025 that Exploited in the Wild
694 views

Top 10 High-Risk Vulnerabilities Of 2025 that Exploited in the Wild

Jan 02, 2026
Passwd: A walkthrough of the Google Workspace Password Manager
627 views

Passwd: A walkthrough of the Google Workspace Password Manager

Dec 26, 2025
OpenAI Hardened ChatGPT Atlas Against Prompt Injection Attacks
594 views

OpenAI Hardened ChatGPT Atlas Against Prompt Injection Attacks

Dec 29, 2025
Google Patches Actively Exploited Chrome Zero-Day (CVE-2026-2441)
570 views

Google Patches Actively Exploited Chrome Zero-Day (CVE-2026-2441)

Feb 17, 2026
PCAPGraph: Threat Hunting at the Speed of Triage

PCAPGraph: Threat Hunting at the Speed of Triage

PCAPGraph is an open-source network investigation and threat hunting tool that transforms packet cap...

June 04, 2026
Open-Source Network Discovery & Topology Mapping

Open-Source Network Discovery & Topology Mapping

RedSide Security has open-sourced NETMAPPER, a network discovery and visualization tool designed to ...

June 03, 2026
RDPGraph: Turn Windows Event Logs into an Interactive RDP Attack Graph

RDPGraph: Turn Windows Event Logs into an Interactive RDP Attack Graph

When an incident unfolds and all you have left are Windows event logs, understanding attacker moveme...

June 03, 2026

Latest Posts

GhostAction Attackers Hide Credential Stealer Inside a Fake Font Across 94 GitHub Repositories

GhostAction Attackers Hide Credential Stealer Inside a Fake Font Across 94 GitHub Repositories

RedSide Security October 19, 2026 Cyber Attacks 10 views

The GhostAction threat actor has moved beyond malicious GitHub Actions workflows, phishing developers and hiding a credential stealer in a fake font file found across 94 repositories.

malware phishing GitHub supply chain attack GhostAction credential stealer open source security
Continue reading: GhostAction Attackers Hide Credential Stealer Insi…