Security News Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs TheHackerNews Daniel Bender 26 Oct 2026 Share Gheist uses stolen GitHub tokens to extract secrets through Actions logs, planting over 13,500 branches across 850 compromised accounts.