Storia in 3 fonti

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

GitHub ghost accounts and exposed PATs scrape corporate orgs through the API, with select cases cloning private repos.

Raccontata da

infoworld.com

thehackernews.com

securityweek.com

Confronto fonti

3 prospettive sulla stessa storia

AI · summaries

thehackernews.comStai leggendo1 g fa

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

GitHub ghost accounts and exposed PATs scrape corporate orgs through the API, with select cases cloning private repos.

originale

infoworld.com3 g fa

GitHub's public APIs are becoming an enterprise reconnaissance tool

Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software environments while blending into normal developer activity.

Leggi questa versione → originale

securityweek.com39 min fa

Ghost Accounts Abuse GitHub API in Mass Recon Campaign

Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.

Leggi questa versione → originale

Timeline cronologica

mercoledì 8 luglio 2026·infoworld.com
GitHub's public APIs are becoming an enterprise reconnaissance tool
Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software environments while blending into normal developer…
giovedì 9 luglio 2026·thehackernews.com
Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs
GitHub ghost accounts and exposed PATs scrape corporate orgs through the API, with select cases cloning private repos.
sabato 11 luglio 2026·securityweek.com
Ghost Accounts Abuse GitHub API in Mass Recon Campaign
Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.