As cited
Copy frozen at (site build).
threat intel
Coordinated GitHub API enumeration and access token abuse
Datadog Security Research identified multiple coordinated campaigns that enumerated GitHub organizations, repositories, and users through the public application programming interface (API), exploited leaked access tokens, and cloned private repositories.
Why it matters: Any organization using GitHub is exposed if attackers obtain access tokens; defenders should audit token exposure, enforce token rotation, and monitor for unauthorized API enumeration and repository access.
- Source published
- First seen by Cybersecurity Tracker