Incident response

Hijacked GitHub Accounts Ran a CI Secret Stealer: Check Your Repos Now

Thousands of hijacked GitHub accounts pushed the wfx-loot CI secret stealer into repositories. Check for the published indicators, rotate secrets and remove cloud backdoors.