Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
The Pwn Request Reckoning: What Still Works Against GitHub Actions
Excerpt
GitHub Actions Security: Auditing pull_request_target | Wiz Blog Wiz Platform Solutions Pricing Resources Customers Company Sign in Under attack? Get a demo Blog The Pwn Request Reckoning: What Still Works Against GitHub Actions GitHub's 2026 Actions changes make pull_request_target attacks harder, but not impossible. Here's the residual attack surface and how to audit for it. The State of SDLC Security Report GitHub Actions Hardening Guide Shay Berkovich October…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-111497 | High | Score 82/100 | First seen |
| SHA1 | 08eba0b27e820071cde6df949e0beb9ba4906955 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…