Security News Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs TheHackerNews Daniel Bender 09 Jul 2026 Share GitHub ghost accounts and exposed PATs scrape corporate orgs through the API, with select cases cloning private repos.