PDA

Просмотр полной версии : Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs


AntichatNews
10.07.2026, 09:00
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDslymdYqhkFwIm3ZeaXVZweYVT_R1d6LCQhIm799y9-5hQ3C45cumIStxGYheFbwosbd_JtrB6FgOthR2KJgfe8PYs0k4 7eGV7263ATac5UR0t7OOaqOUGOf5DHAR4b0IaKTozk0UEiHJz5-nze3b1ureycPGqdPVlqrImWreOWwMpGxC8kgBvONCLGbH/s1700-e365/github-ghost.jpg

Datadog Security Labs is warning of "several overlapping campaigns" that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. "Operators rely on automated scraping tooling with custom or legitimate-sounding user agents, leveraging GitHub 'ghost' accounts that are often years old, or compromised OAuth tokens and personal

Источник новости:
The Hacker News (https://thehackernews.com/2026/07/dormant-github-accounts-help-attackers.html)

Читать полностью (https://thehackernews.com/2026/07/dormant-github-accounts-help-attackers.html)