النتائج المتحققة

لا يوجد

التناقضات والقيود

لا يوجد

المتابعة المفتوحة

• OPEN [HIGH]: VICTIM_TOKEN_ORG_DENOMINATOR — No authoritative public denominator for stolen tokens, affected organizations, reachable repositories, successful workflow executions or unique victims.
• OPEN [HIGH]: SECRET_EXFILTRATION_AND_CLOUD_OUTCOME — No public count of secrets successfully exfiltrated or downstream cloud actions attributable to Gheist across affected organizations.
• OPEN [MEDIUM-HIGH]: TOKEN_SOURCE_AND_ACTOR_ATTRIBUTION — Per-account token origin and operator identity are unresolved; overlap with infostealers, Trivy exposure and other campaigns is insufficient for a single-source/single-actor claim.
• OPEN [MEDIUM-HIGH]: SELF_HOSTED_RUNNER_REALIZED_IMPACT — No reliable public denominator for self-hosted runner jobs that executed successfully or host/cloud/Kubernetes credentials actually collected.

المصادر

لا يوجد