Blogs

New GhostAction Wave Hits Hundreds of Repos, Expanding Beyond CI/CD Secrets to Cloud Credentials

Socket

A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.

Visit Site

Blogs Socket

BlogsGlassWorm Loader Hits Open VSX via Developer Account CompromiseSocket BlogsAnthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI AttackSocket BlogsAnnouncing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket BlogsIntroducing Dependency Divergence GitHub ActionSocket BlogsUpdated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket BlogsComparing Reachability Analysis ProvidersSocket EventsCloud Security Trends & Challenges: Complete GuideCybersecurity Exchange ResearchDigital Forensics & Emerging Technologies GuideCybersecurity Exchange BlogsRedis Cloud PrivateRedis NewsThis Week in Programming: Who's Headed to KubeCon?Thenewstack NewsPuppet’s New Mission: Automating Cloud Native InfrastructureThenewstack NewsSecurity Considerations for API-Driven Apps Deployed to CloudThenewstack NewsIntroducing CORPS: The 5 Pillars for a Robust Cloud Architecture FrameworkThenewstack BlogsCloud Systems: Deploying to Amazon ECSPulumi BlogsAnnouncing the New Pulumi Partner ProgramPulumi BlogsPulumi ESC and External Secrets Operator: The Perfect Solution for TodayPulumi BlogsConnect Any Git or Mercurial Repo to Pulumi with Custom VCSPulumi BlogsAnnouncing Restore Stacks: Recover Deleted Stacks in the Pulumi CloudPulumi BlogsHow We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi BlogsDiscovered Stacks: One Place for All Your InfrastructurePulumi