Sam LABBE
Author ProfileClaim This Author Profile
Prove ownership by publishing #HashtagPLUS and this profile link on your author page or an article under your byline. A moderator or admin will review the request before it merges into your real HashtagPLUS username.
Gheist: 13,500 secret-dumping workflows planted with stolen GitHub tokens — audit yours in 5 minutes
🌐 dev.toSource
Since September, a campaign called Gheist planted 13,500 secret-dumping workflows with stolen GitHub tokens — base32 defeats log masking, permissions:{} protects nothing, and the exfil channel is GitHub itself. The audit that tells you in 5 minutes if you were hit.
🌐 dev.toSource
A 'BREAKING: unpatched PHP RCE' alert is going around. The actual php.net advisory for CVE-2026-115560 says something quieter, stranger and more useful: an unlikely config combo, the same mitigation you already applied, and three lines of grep to know if it concerns you.
🌐 dev.toSource
Five days after the number-4 key story, eMudhra's board voted to exit the global SSL/TLS business — and blamed "social media amplification". The same day, a full 1FA OTP bypass of their certificate portal surfaced. Sequel to: A CA private key was the number 4.