- Threat actor reused unrotated GitHub Actions secrets to compromise 73 Microsoft repos
- Miasma worm planted across Azure, microsoft, Azure‑Samples, and MicrosoftDocs orgs
- Microsoft pulled affected repos, notified impacted customers, and continues investigation
GitHub has disabled 73 of Microsoft’s repositories after a threat actor allegedly used credentials stolen a month ago to break in and plant an infostealer.