{"id":48857,"date":"2026-10-26T15:14:48","date_gmt":"2026-10-26T06:14:48","guid":{"rendered":"https:\/\/jore2.com\/?p=48857"},"modified":"2026-10-26T15:14:48","modified_gmt":"2026-10-26T06:14:48","slug":"news-22451-gheist-campaign-plants-secret-dumping-workflows-using-stolen-github-tokens","status":"publish","type":"post","link":"https:\/\/jore2.com\/?p=48857","title":{"rendered":"Wiz, \ud0c8\ucde8\ub41c GitHub \ud1a0\ud070 \uc545\uc6a9\ud55c Gheist \uacf5\uaca9 \ucea0\ud398\uc778 \ucd94\uc801"},"content":{"rendered":"
\n

\uc724\uc9c0\ud6c4<\/strong><\/p>\n<\/div>\n

\uc0ac\uc774\ubc84 \ubcf4\uc548 \uae30\uc5c5 Wiz\uc758 \uc5f0\uad6c\uc9c4 \ub77c\ubbf8 \ub9e4\uce74\uc2dc\uc640 \ud788\ub77c \ub77c\ub9c8\ud2f0\uac00 ‘Gheist’\ub77c\ub294 \uc774\ub984\uc758 \uc0c8\ub85c\uc6b4 \uacf5\uaca9 \ucea0\ud398\uc778\uc744 \ucd94\uc801\ud574 10\uc6d4 25\uc77c \uacb0\uacfc\ub97c \ubc1c\ud45c\ud588\uc2b5\ub2c8\ub2e4. \uc774 \uacf5\uaca9\uc740 \ud0c8\ucde8\ub41c GitHub \uc561\uc138\uc2a4 \ud1a0\ud070\uc744 \uc774\uc6a9\ud574 \uc800\uc7a5\uc18c \ub0b4\ubd80\uc758 \ubbfc\uac10\ud55c \uc815\ubcf4\ub97c \ube7c\ub0b4\ub294 \ub370 \ucd08\uc810\uc744 \ub9de\ucd94\uace0 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n

\uacf5\uaca9\uc790\ub294 \ud1a0\ud070\uc774 \uc811\uadfc\ud560 \uc218 \uc788\ub294 \ubaa8\ub4e0 \uc800\uc7a5\uc18c\uc5d0 ‘ci-sync’\ub85c \uc2dc\uc791\ud558\ub294 \ube0c\ub79c\uce58\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4. \uc774\uc5b4 ‘.github\/workflows\/sync-check.yml’ \ud30c\uc77c\uc744 \ucee4\ubc0b\ud558\uba70, \ucee4\ubc0b \uba54\uc2dc\uc9c0\ub294 ‘ci: sync config’\ub85c \uc704\uc7a5\ub418\uc5b4 \uc815\uc0c1\uc801\uc778 \uc720\uc9c0\ubcf4\uc218 \uc791\uc5c5\ucc98\ub7fc \ubcf4\uc785\ub2c8\ub2e4. \ud478\uc2dc \uc774\ubca4\ud2b8\uac00 \ubc1c\uc0dd\ud558\uba74 \ud574\ub2f9 \uc6cc\ud06c\ud50c\ub85c\uc6b0\uac00 \uc790\ub3d9\uc73c\ub85c \uc2e4\ud589\ub429\ub2c8\ub2e4.<\/p>\n

\ud575\uc2ec \uae30\ubc95\uc740 \ub85c\uadf8 \ub9c8\uc2a4\ud0b9 \uc6b0\ud68c\uc5d0 \uc788\uc2b5\ub2c8\ub2e4. GitHub\ub294 \ub85c\uadf8\uc5d0\uc11c \uc2dc\ud06c\ub9bf \uac12\uc774 \uc6d0\ubb38 \uadf8\ub300\ub85c \ub178\ucd9c\ub420 \uacbd\uc6b0 \uc774\ub97c \uac00\ub9bd\ub2c8\ub2e4. \ud558\uc9c0\ub9cc Gheist \ub3c4\uad6c\ub294 \uc2dc\ud06c\ub9bf\uc744 Base32 \uc778\ucf54\ub529\ud558\uc5ec \ucd9c\ub825\ud558\uae30 \ub54c\ubb38\uc5d0 \ub9c8\uc2a4\ud0b9 \ub85c\uc9c1\uc5d0 \uac78\ub9ac\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.<\/p>\n

\uc774\ud6c4 \ub3c4\uad6c\ub294 API\ub97c \ud1b5\ud574 \ub85c\uadf8\ub97c \ub2e4\uc6b4\ub85c\ub4dc\ud558\uace0, \uba87 \ucd08 \ub9cc\uc5d0 \uc2e4\ud589 \uae30\ub85d\uc744 \uc0ad\uc81c\ud558\uc5ec \ud754\uc801\uc744 \uc9c0\uc6c1\ub2c8\ub2e4.<\/p>\n

Wiz\ub294 9\uc6d4 15\uc77c\ubd80\ud130 \uc774 \ud65c\ub3d9\uc744 \ubaa8\ub2c8\ud130\ub9c1\ud588\uc73c\uba70, \ud604\uc7ac\uae4c\uc9c0 850\uac1c \uc774\uc0c1\uc758 \uce68\ud574\ub41c \uacc4\uc815\uc5d0\uc11c 1\ub9cc 3500\uac1c \uc774\uc0c1\uc758 \uc2ec\uc5b4\uc9c4 \ube0c\ub79c\uce58\ub97c \ud68c\uc218\ud588\ub2e4\uace0 \ubc1d\ud614\uc2b5\ub2c8\ub2e4. \ud53c\ud574 \ub300\uc0c1\uc740 \uac1c\uc778 \ud504\ub85c\uc81d\ud2b8\ubd80\ud130 \uae30\uc5c5\uc6a9 \ube44\uacf5\uac1c \uc800\uc7a5\uc18c\uae4c\uc9c0 \ub2e4\uc591\ud558\uac8c \ubd84\ud3ec\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n

\ucd5c\uadfc GitHub\uc758 \ubcf4\uc548 \uac1c\uc120 \uc870\uce58\ub85c \uacf5\uac1c \uc800\uc7a5\uc18c\uc5d0\uc11c\uc758 \uc545\uc6a9\uc740 \uc0c1\ub2f9 \ubd80\ubd84 \ucc28\ub2e8\ub41c \uc0c1\ud0dc\uc785\ub2c8\ub2e4. \uadf8\ub7ec\ub098 \ube44\uacf5\uac1c \uc800\uc7a5\uc18c\ub098 GitHub Enterprise \ud658\uacbd\uc5d0\uc11c\ub294 \uc5ec\uc804\ud788 \uc131\uacf5\uc801\uc778 \uce68\ud22c\uc640 \ud6c4\uc18d \ud65c\ub3d9\uc774 \uad00\uce21\ub418\uace0 \uc788\uc2b5\ub2c8\ub2e4. \uad00\ub828 API \uc694\uccad\uc5d0\ub294 ‘gheist’\ub77c\ub294 \ud2b9\uc815 \uc0ac\uc6a9\uc790 \uc5d0\uc774\uc804\ud2b8\uac00 \ud3ec\ud568\ub418\ub294 \uac83\uc774 \ud2b9\uc9d5\uc785\ub2c8\ub2e4.<\/p>\n

\uc5f0\uad6c\uc9c4\uc740 \uc774\ubc88 \ud65c\ub3d9\uc744 GitHub \uce21\uc5d0 \ubcf4\uace0\ud588\uc73c\uba70, \uc57d 3\ubd84\uc758 2\uc5d0 \ud574\ub2f9\ud558\ub294 \uc5f0\ub8e8 \uacc4\uc815\uc740 \ud604\uc7ac GitHub\uc5d0\uc11c \ub354 \uc774\uc0c1 \ud655\uc778\ud560 \uc218 \uc5c6\ub294 \uc0c1\ud0dc\ub77c\uace0 \uc124\uba85\ud588\uc2b5\ub2c8\ub2e4. \uc774\ub294 \ud50c\ub7ab\ud3fc \ucc28\uc6d0\uc758 \ub300\uc751 \uc870\uce58\uac00 \uc774\ub8e8\uc5b4\uc84c\uc74c\uc744 \uc2dc\uc0ac\ud569\ub2c8\ub2e4. \ud074\ub77c\uc6b0\ub4dc \uac10\uc0ac \ub85c\uadf8\ub97c \ubd84\uc11d\ud558\uba74 GitHub \uc790\uccb4 \ub85c\uadf8\uac00 \uc218\uc9d1\ub418\uc9c0 \uc54a\uc740 \uacbd\uc6b0\uc5d0\ub3c4 \uc774\ub7ec\ud55c \uacf5\uaca9 \ud328\ud134\uc744 \ud0d0\uc9c0\ud560 \uc218 \uc788\ub2e4\uace0 Wiz\ub294 \uc870\uc5b8\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n","protected":false},"excerpt":{"rendered":"

Wiz \uc5f0\uad6c\uc9c4\uc774 2026\ub144 9\uc6d4 \uc911\uc21c\ubd80\ud130 \ud65c\ub3d9 \uc911\uc778 Gheist \ucea0\ud398\uc778\uc744 \uacf5\uac1c\ud588\uc2b5\ub2c8\ub2e4. \ud0c8\ucde8\ub41c \ud1a0\ud070\uc73c\ub85c \uc6cc\ud06c\ud50c\ub85c\uc6b0\ub97c \uc2ec\uc5b4 \uc2dc\ud06c\ub9bf\uc744 \uc720\ucd9c\ud558\ub294 \ubc29\uc2dd\uc774\uba70, \ud604\uc7ac\uae4c\uc9c0 850\uac1c \uc774\uc0c1 \uacc4\uc815\uc774 \ud53c\ud574\ub97c \uc785\uc740 \uac83\uc73c\ub85c \ud655\uc778\ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/p>\n","protected":false},"author":2,"featured_media":48856,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jore2_quality_policy":"people-first-v2","footnotes":""},"categories":[405],"tags":[32190,3346,32189,4195,32191],"class_list":["post-48857","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-405","tag-gheist","tag-github","tag-wiz","tag-4195","tag-32191"],"featured_image_urls":{"full":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22451-gheist-campaign-plants-secret-dumping-workflows-using-stolen-github-tokens.png",1200,630,false],"thumbnail":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22451-gheist-campaign-plants-secret-dumping-workflows-using-stolen-github-tokens-150x150.png",150,150,true],"medium":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22451-gheist-campaign-plants-secret-dumping-workflows-using-stolen-github-tokens-300x158.png",300,158,true],"medium_large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22451-gheist-campaign-plants-secret-dumping-workflows-using-stolen-github-tokens-768x403.png",640,336,true],"large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22451-gheist-campaign-plants-secret-dumping-workflows-using-stolen-github-tokens-1024x538.png",640,336,true],"1536x1536":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22451-gheist-campaign-plants-secret-dumping-workflows-using-stolen-github-tokens.png",1200,630,false],"2048x2048":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22451-gheist-campaign-plants-secret-dumping-workflows-using-stolen-github-tokens.png",1200,630,false],"morenews-large":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22451-gheist-campaign-plants-secret-dumping-workflows-using-stolen-github-tokens-825x575.png",825,575,true],"morenews-medium":["https:\/\/jore2.com\/wp-content\/uploads\/2026\/10\/news-22451-gheist-campaign-plants-secret-dumping-workflows-using-stolen-github-tokens-590x410.png",590,410,true]},"author_info":{"info":["\uc724\uc9c0\ud6c4"]},"category_info":"\ub274\uc2a4<\/a>","tag_info":"\ub274\uc2a4","comment_count":"0","_links":{"self":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts\/48857","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=48857"}],"version-history":[{"count":0,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/posts\/48857\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=\/wp\/v2\/media\/48856"}],"wp:attachment":[{"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=48857"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=48857"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jore2.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=48857"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}