Storia in 3 fonti

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

GitHub ghost accounts and exposed PATs scrape corporate orgs through the API, with select cases cloning private repos.

Raccontata da

infoworld.com

thehackernews.com

securityweek.com

Confronto fonti

3 prospettive sulla stessa storia

AI · summaries

thehackernews.comStai leggendo1 mese fa

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

GitHub ghost accounts and exposed PATs scrape corporate orgs through the API, with select cases cloning private repos.

originale

infoworld.com1 mese fa

GitHub's public APIs are becoming an enterprise reconnaissance tool

Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software environments while blending into normal developer activity.

Leggi questa versione → originale

Timeline cronologica

mercoledì 8 luglio 2026·infoworld.com
GitHub's public APIs are becoming an enterprise reconnaissance tool
Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software environments while blending into normal developer…
giovedì 9 luglio 2026·thehackernews.com
Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs
GitHub ghost accounts and exposed PATs scrape corporate orgs through the API, with select cases cloning private repos.

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Confronto fonti

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

GitHub's public APIs are becoming an enterprise reconnaissance tool

Timeline cronologica

GitHub's public APIs are becoming an enterprise reconnaissance tool

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Ghost Accounts Abuse GitHub API in Mass Recon Campaign

Ghost Accounts Abuse GitHub API in Mass Recon Campaign