Attackers are using 50+ dormant GitHub “ghost” accounts and exposed PATs to map corporate orgs through the GitHub API.
Datadog says the campaigns enumerate repos, users, gists, followers, and org memberships. In select cases, actors cloned private repos.
Read the article - https://thehackernews.com/2026/07/dormant-github-accounts-help-attackers.html
Post #4606
3.29K
- 👍 7
- 🤣 2