Product
GitHub Enterprise Server
- First Reported
- Apr 28, 2026
- Latest Reported
- Oct 26, 2026
Reported Context (3)
- A GitHub safeguard that pauses suspicious workflow runs stopped every public-repository run Wiz checked, but it does not cover private repositories or GitHub Enterprise Server. Wiz Finds Gheist Campaign Using Stolen GitHub Tokens to Steal Repository Secrets
- Unfortunately, that hold doesn't apply to private repositories or GitHub Enterprise Server. There, GitHub audit logs show runs on ci-sync-* branches completing and then being deleted by the gheist user agent. CloudTrail Gheist Campaign Uses Stolen GitHub Tokens to Expose Repository Secrets
- in GitHub's internal git infrastructure that could have affected both GitHub.com and GitHub Enterprise Server. By exploiting an injection flaw in GitHub's internal protocol, any authenticated user could Wiz Details GitHub RCE Flaw Allowing Code Execution With a Single Git Push
CVE (1)
Malware (1)
People (5)
MITRE ATT&CK (13)
Vendors (3)
Products (6)
Tools (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.