GitHub's public APIs are becoming an enterprise reconnaissance tool

GitHub's public APIs are becoming an enterprise reconnaissance tool

GitHub continues to be a scintillating target for attackers because it sits in the middle of the software supply chain and gives threat actors three things they crave: source code, secrets, and automated pipelines to run amok in. Datadog Security Research has been tracking what it calls a “sustained pattern” of GitHub API abuse over the past several months that seeks to map organizations and their members. While individually these requests are “…