Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
2 IOCs

The Pwn Request Reckoning: What Still Works Against GitHub Actions

Wiz
Wiz
Published October 26, 2026Original Report

Excerpt

GitHub Actions Security: Auditing pull_request_target | Wiz Blog Wiz Platform Solutions Pricing Resources Customers Company Sign in Under attack? Get a demo Blog The Pwn Request Reckoning: What Still Works Against GitHub Actions GitHub's 2026 Actions changes make pull_request_target attacks harder, but not impossible. Here's the residual attack surface and how to audit for it. The State of SDLC Security Report GitHub Actions Hardening Guide Shay Berkovich October…

Read the original report →

Indicators of Compromise

Open the mindmap →

2 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-111497HighScore 82/100First seen
SHA108eba0b27e820071cde6df949e0beb9ba4906955MediumScore 53/100First seen

IOC Relationship Graph

Building graph…