Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.

Abstract: As modern web services increasingly rely on REST APIs, their thorough testing has become crucial. Furthermore, the advent of REST API documentation languages, such as the OpenAPI ...