https://imsj-blog.pages.dev/tags/github-actions/Recent content in Github-Actions on imsjHugoenMon, 12 Oct 2026 00:00:00 +0000https://imsj-blog.pages.dev/posts/ghostaction-github-workflows-return/Mon, 12 Oct 2026 00:00:00 +0000https://imsj-blog.pages.dev/posts/ghostaction-github-workflows-return/<p>A lot happened this week: NetScaler and FortiMail zero-days, a KillSec ransomware takedown, a GitLab AI Gateway bug rated 9.9. The one I&rsquo;d tell a developer friend about first is the GhostAction comeback, because it hits something I do every day: push to GitHub and trust that the workflows in my repo are mine.</p> <p>According to Socket&rsquo;s write-up on 9 October, more than 500 GitHub accounts have committed a malicious workflow to tens of thousands of repositories since 7 October. It is an evolution of the GhostAction campaign first documented in September 2025.</p>