SecurityThe Hacker Newsabout 2 hours ago
Dormant GitHub Accounts Aid Corporate Reconnaissance
1 min read
Datadog Security Labs warns of campaigns using dormant GitHub accounts, some created two to five years ago, to enumerate corporate organizations via the GitHub API. Over 50 ghost accounts and compromised tokens blend into normal traffic. In select cases, attackers cloned private repositories.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGitHub
