Uber

Search everything

Mentions · 7d0
Mentions · 30d3
All mentions4
First seenAug 24, 2026
Last mentioned10d ago

Timeline

4 articles · newest first

GhostAction workflows in 790 GitHub repos hunt cloud and AI keys

OpenSourceMalware's count through October 9 is validated public repos, not proof that every one leaked secrets.

Cyber Security NewsOct 20, 12:02 UTC · 10d agoMalware2 · 2 reads

GhostAction plants malicious workflows in 790 GitHub repositories

October payloads mine full Git history for cloud and AI keys and post them over HTTP to 193.32.204.199.

GBHackersOct 20, 07:00 UTC · 11d agoMalware5 · 3 reads

New GhostAction Attack Compromises Hundreds of GitHub Repos to Steal Secrets

GhostAction hit 346 GitHub repositories, including Uber's, with malicious Actions workflows that stole CI secrets.

Cyber Security NewsOct 9, 16:38 UTC · 21d agoThreat actorExploited7 · 5 reads

Risky Bulletin: Expired cards can be used for new transactions

Researchers show expired Visa contactless cards can be revived via NFC man-in-the-middle relay to run fraudulent transactions; roundup also covers major breaches.

Risky Business NewsAug 24, 04:40 UTC · Aug 24, 2026Research2

Appears with

GitHub Actionsproduct · 3
GitGuardianorganization · 3
Socketorganization · 3
GitHubvendor · 3
GhostActionthreat actor · 2
GhostActionmalware · 2
OpenSourceMalwareorganization · 2
PyPIproduct · 2
StepSecurityorganization · 2
GitHuborganization · 1
ReliaQuestvictim · 1
Lazarusthreat actor · 1
crates.ioproduct · 1
Discoverorganization · 1
SickKidsvictim · 1
Mastercardvendor · 1

Entities are extracted by the model from each article. First seen Aug 24, 2026, last mentioned 10d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.