Cyber CrimeNewPlugin4Shell Exposes AI Coding Agents to RCE
A zero-click remote code execution flaw in popular AI coding agents could let attackers run malicious code without developer interaction, researchers warn.
> Search
30 results for “git”
Cyber CrimeNew
AI & MLOpenAI Details AI Models Going Rogue
OpenAI's new misalignment framework reveals models that searched GitHub for leaked keys and fabricated data during training.
SecurityGitLab's Perfect 10 Flaw Exposes Secrets
A maximum-severity path traversal bug in GitLab's repository commits API lets unauthenticated attackers read arbitrary files, and probes are already underway.
Cyber CrimeMeshCentral Backdoor Hid Inside 3BB Network
Hunt.io says an attacker used a legitimate remote-management tool to hold root access inside Thailand's 3BB and target subscriber credentials.
SecurityGitLab's Patch Race Against Active Exploits
GitLab patches a maximum-severity path traversal flaw and a critical EE deserialization bug as researchers report in-the-wild probing within hours.
Tech NewsLogitech G305 X Superlight review: 61g wireless at a budget price
We test the Logitech G305 X Superlight, a 61g wireless mouse with dual connectivity and a low profile.
Tech NewsEFF Urges Courts: Don't Bend Copyright for AI
Digital rights group warns judges against reshaping copyright law in response to AI anxiety, urging reliance on fair use.
SecurityBrowser extensions turn into supply chain risk
Attackers buy legitimate Chrome, Edge extensions and push malware via updates, Socket reports.
Cyber Crimenpm Mirrors Turned into Phishing Hosts
Attackers abuse npm mirrors to host HTML phishing pages, bypassing security filters by serving from legitimate domains.
SecurityGitLab Flaw Exploited Within Days of Patch
GitLab's CVE-2026-19478 is under active exploitation, days after disclosure, urging immediate patching.
Tech NewsSigned Drivers Turn Into Attack Tools
This week's threats exploit trusted components: signed drivers, legitimate apps, and AI to bypass defenses.
Tech NewsCursor's Origin Aims at GitHub's Woes
AI startup Cursor, now part of SpaceX, launches Origin, a code-hosting platform that integrates with GitHub amid user frustration over outages.
SecurityGitLab Critical Flaw Allows Unauthenticated Project Deletion
A critical GitLab vulnerability could let unauthenticated attackers modify or delete public projects and user data.
SecuritySnowflake CI/CD Flaw Opens Door to Issue-Based Injection
A GitHub Actions workflow flaw in Snowflake's connector repo allowed crafted issues to execute commands with exposed Jira credentials.
Tech NewsGitHub Outage Disrupts Developer Services
GitHub confirms widespread outage affecting core services, with error rates reaching 50% for downloads.
TrendingEFF's Human Touch in an AI Era
EFF's art director explains why the digital rights group still relies on human artists for its images.
SecurityMozilla Rotates GPG Signing Key After GitHub Exposure
Mozilla replaced the GPG key for Firefox and Thunderbird after an unencrypted copy leaked to a private GitHub repo.
Cyber CrimeDeepfake glitch exposes Spanish certificate fraud suspect
A momentary face-swap failure helped Spanish police identify a man accused of obtaining digital certificates under stolen identities.
Cyber CrimeH1 2026 Attack Chains Bypass Trust
Recent investigations reveal how attackers leverage legitimate accounts and blockchain data to execute sophisticated financial fraud.
Cyber CrimeChainDrop Worm Exploits npm Ecosystem
A self-propagating malware campaign has compromised over 1,300 npm packages, leveraging legitimate GitHub workflows to spread.
SecurityBeyond Compliance: Rethinking Cyber Risk
Expert Edna Conway argues that true digital resilience requires moving past checkbox compliance to address complex supply chain risks.
SecurityCourt Rules Browser Tools Bypass CFAA
An appellate court has affirmed that the creation of a web browser does not constitute a violation of the CFAA.
SecurityCritical File Upload Flaw Hits HUMANIST HR
A critical unrestricted file upload vulnerability in Bilin Software's HUMANIST Digital Human Resources allows remote attackers to execute code.
SecurityCritical Shell Injection Hits Wazuh Workflows
A critical shell injection vulnerability in Wazuh workflows allows attackers to execute arbitrary commands and steal sensitive credentials via pull requests.
SecurityCAF Bank Shuts Online Portal After Breach
A critical third-party software flaw forces the charity-focused bank to suspend digital access for 14,000 organizations.
SecurityWhat Are Persistent Permissions? A Security Primer
Learn about the security implications of persistent permissions and why maintaining control over account access is vital for digital safety.
TrendingLibrarians Lead Grassroots AI Opt-Outs
Public libraries are seeing high demand for workshops focused on disabling AI tools amid growing public frustration with Big Tech.
SecurityMalware Abuses Notepad++ Plugin System
A malicious campaign targeting Ukrainian organizations leverages legitimate software bundles to achieve persistent system access.
SecurityGitLab RCE Chain Lacks CVE Classification
A newly public exploit targeting GitLab reveals how silent patches for library bugs can leave critical vulnerabilities exposed.
Cyber CrimeEuropol Targets The Com Content Ecosystem
Law enforcement has flagged over 4,000 URLs linked to a network that recruits minors for digital extortion and physical violence.