Ghost Accounts Abuse GitHub API in Mass Recon Campaign

SecurityWeek roundup covering multiple active threats and notable industry developments: attackers are creating ‘ghost’ GitHub accounts to abuse the GitHub API for large-scale recon of organizations (repositories and members), enabling targeted follow-on attacks. Separately, researchers report a network of ~200 malicious GitHub repositories (Go module -> PowerShell dead-drop resolver) used to deliver Windows malware, and the destructive GigaWiper backdoor combines wiper and ransomware capabilities. Other items include Okta-warning vishing campaigns targeting Microsoft 365/Entra ID, an adversar