3152
wfx GitHub Actions attack: how stolen tokens became cloud backdoors
The CyberSec Guru
How the wfx campaign used 61,839 probe pull requests and stolen GitHub tokens to hijack CI runners, abuse OIDC, and plant AWS and Azure backdoors
How the wfx campaign used 61,839 probe pull requests and stolen GitHub tokens to hijack CI runners, abuse OIDC, and plant AWS and Azure backdoors
