CyberSecurityBoardThreat Intel · CVEs · Products
Cyber Companies

Socket: Application Security Firm Discovers GitHub Actions Abuse Campaign

June 25, 2026

Socket is an application security firm that identified a large-scale campaign abusing GitHub Actions runners to target cPanel and WHM servers. The campaign involves compromised Packagist packages and malicious workflows that scan for vulnerable servers and steal credentials.