SecurityWeek

Ghost Accounts Abuse GitHub API in Mass Recon Campaign

Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.
InfoWorld

GitHub’s public APIs are becoming an enterprise reconnaissance tool

Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software ...

Slack’s Slackbot can now pull your CRM data, generate charts, and send DocuSigns — all from a chat message.

Salesforce has connected Slackbot to CRM, Tableau, Data 360 and AI agents through MCP, turning Slack into a conversational ...

Shared API keys expose AI agents at 69% of enterprises, new VentureBeat research finds

New VentureBeat survey data: 69% of enterprises share AI agent credentials, letting one compromised agent inherit the access ...