buildConfirmed2 publishers GhostAction attackers used roughly 1,900 hijacked GitHub accounts to plant credential-stealing workflows in over 30,000 repos. No GitHub Actions flaw was involved, so defence means rotating exposed keys and reviewing who edits workflows.
Perspective Coverage
3 publishers
- Builder
- Builder 38%
- Operator
- Operator 52%
- Investor
- Investor 10%
Reality
- Evidence70
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence72
Symantec says new Aoki infostealer versions steal API keys and tokens for AI coding assistants, plus AWS credentials, from infected machines. The firm says threat actors now value such credentials like payment card data.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+15
- Incentives40
- Confidence55
Fortra researcher finds RFQ-themed phishing up 12-fold since October 2025
Fortra researcher Cadence Riddle tracked a 12-fold rise in malicious emails mentioning RFQ from October 2025 to September 2026. Nearly 73% of the lures pointed to a credential-stealing login page, Help Net Security reported.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence55
Akira affiliate took a password-only SonicWall VPN account to the domain controller in about two hours
An Akira affiliate began spraying passwords at a SonicWall SSL VPN on August 4, 2026, and one worked about seven minutes later. The account had no MFA, and the ransomware deployment that followed failed after credentials and file-share data were already stolen.
Reality
- Evidence35
- Adoption
- Not scored
- Hype gap+15
- Incentives80
- Confidence50
GhostAction's credential-stealing GitHub workflow has reached tens of thousands of repositories through more than 500 accounts since October 7, Socket says. Any repository carrying the file should be treated as having lost its Actions secrets and every key in its git history.
Reality
- Evidence58
- Adoption70
- Hype gap+8
- Incentives
- Not scored
- Confidence62
Arctic Wolf reports the two newly disclosed PaperCut bugs being used together against K-12 and university print servers in the US and Europe, with collection aimed at the directory credentials the server stores to do its job.
Perspective Coverage
3 publishers
- Builder
- Builder 32%
- Operator
- Operator 63%
- Investor
- Investor 5%
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+5
- Incentives30
- Confidence62
buildOne report1 publisher Tag-pinned workflows re-ran Mini Shai-Hulud after issues-helper was re-enabled
Socket says workflows using issues-helper@v2.2.1 re-ran Mini Shai-Hulud after the Action was re-enabled on September 16 with its malicious tags intact. The earlier takedown only made those jobs fail, so the fix that holds is dropping the Action or pinning a verified commit SHA.
Reality
- Evidence55
- Adoption35
- Hype gap+10
- Incentives
- Not scored
- Confidence55
Ontinue says the Python implant takes tasking from SharePoint dead drops over Graph API, relays interactive sessions through Teams TURN, and moves all of it through the victim's own headless Edge.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+20
- Incentives40
- Confidence60
Expel's teardown of a loader first compiled around 28 July 2026 puts the whole delivery chain outside email, and says its module hashes change with every infection.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence60
The probes read Langflow's secret key file and grep the process environment for OpenAI and AWS credentials, which puts an AI orchestration tool on the same scanning clock as the Rails file-read bug of the same week.
Perspective Coverage
4 publishers
- Builder
- Builder 30%
- Operator
- Operator 60%
- Investor
- Investor 10%
Reality
- Evidence62
- Adoption40
- Hype gap+15
- Incentives65
- Confidence60
buildOne report1 publisher Compromised MemOS packages scan for developer tokens the moment Python imports them
Semgrep found sckit hidden in the genuine MemOS npm and PyPI packages, where it fires on Python import to scan for npm, GitHub, cloud and Slack tokens. It runs on import, not on install, so install-time scanning misses it, and anyone who imported an affected version should rotate those tokens.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+25
- Incentives
- Not scored
- Confidence50
Coder says an unidentified actor reached its Cloudflare infrastructure and pointed part of registry.coder.com at servers it controlled. Because those servers are unreachable, nobody can enumerate who downloaded what.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+5
- Incentives45
- Confidence65
Koi Security counted 126 npm packages and more than 86,000 installs since August 2025, with 80 still live when it published. npm pulled the stealer from the attacker's host at install time. That put it outside the package a scanner reads.
Reality
- Evidence60
- Adoption35
- Hype gap+20
- Incentives55
- Confidence60
Malwarebytes found a page promising 10,000 free months of Claude Max that skips the card and collects Google logins through a fake browser window loaded from a rented, actively maintained widget.
Reality
- Evidence58
- Adoption40
- Hype gap+12
- Incentives62
- Confidence66
buildOne report1 publisher GreyNoise ties 18,566 stolen government records and 996 harvested Zyxel switches to one actor
GreyNoise reports the WordPress intrusion and the Zyxel switch harvest as separate operations run from shared scanning infrastructure by a suspected Chinese-speaking actor it tracks as Kapibala.
Reality
- Evidence46
- Adoption57
- Hype gap+12
- Incentives58
- Confidence52
buildOne report1 publisher Talos finds a Windows implant that puts each attack step to a four-LLM vote
Cisco Talos read CLOSEDQUORUM statically: a Go binary that polls DeepSeek, Qwen, Mistral and Gemini before it touches LSASS. The distributed sample has dummy keys. One answering provider can carry the vote.
Reality
- Evidence58
- Adoption8
- Hype gap+25
- Incentives60
- Confidence55
Cisco Talos finds malware that hands its command-and-control decisions to four voting models
Cisco Talos says its CLOSEDQUORUM sample asks four language models for executable decisions, tallies the votes and acts on the winner. An entire phase of the attack runs while the operator is offline.
Reality
- Evidence50
- Adoption8
- Hype gap+40
- Incentives62
- Confidence54
Talos details a credential stealer that asks four commercial model APIs what to do next
Cisco Talos has published CLOSEDQUORUM, a Windows credential stealer with no command-and-control server. It hands the state of the infected host to Gemini, DeepSeek, Qwen and Mistral, then acts on the majority verdict.
Reality
- Evidence52
- Adoption15
- Hype gap+18
- Incentives68
- Confidence55
Red Heron-linked actor turned mid-July wp2shell exploits into 18,566 stolen government records
GreyNoise traced scans from a single IP address, running since early June 2026, to a Chinese-speaking actor that breached 49 organizations through WordPress Core and stripped configs and root hashes from 996 ZyXEL switches.
Reality
- Evidence45
- Adoption68
- Hype gap+22
- Incentives55
- Confidence52
A fake Twilio bug-bounty probe went up on npm eleven times on August 14
ReversingLabs found tw-pkgprobe-7731 claiming to be an authorized Twilio HackerOne research probe while it tried to exfiltrate data, and its 2026 count of malicious npm packages passed all of 2024 by the end of August.
Reality
- Evidence60
- Adoption25
- Hype gap+15
- Incentives78
- Confidence55