Open post The Threat Codex @threatcodex@infosec.exchange · 3mo ago Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign #Packagist #GitHub #cPanel #CVE_2026_41940 socket.dev Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.
