🚨 Attackers turned GitHub-hosted runners into cPanel attack infrastructure.

🚨 Attackers turned GitHub-hosted runners into cPanel attack infrastructure. They planted 583 malicious workflows to target cPanel and WHM servers exposed to CVE-2026-41940, hunting for cloud keys, API tokens, SSH data, and other secrets. How the campaign worked: https://thehackernews.com/2026/07/attackers-weaponize-github-actions.html