Finally, Payment by Bank Transfer Comes to Have I Been Pwned

Presently sponsored by: Not every rogue agent is an attack. In a live webinar on Nov 17, Researcher Tyler Holmwood walks through cases of agents going off course.

This is simultaneously the most boring yet exciting blog title I’ve written in a long time. How you pay for services isn’t exactly a sexy topic, but it solves a problem that’s been a massive bugbear for a long time.

Here’s a

Continue reading Finally, Payment by Bank Transfer Comes to Have I Been Pwned→

Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones

A flaw in Git can let a malicious repository run an attacker’s code on a computer that clones it recursively, together with its submodules. The Git project fixed it this week in Git 2.56.1, with matching fixes for the 2.50 through 2.55 series in 2.50.2… Continue reading Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones→

Posted in Uncategorized

SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users

An attacker exploited a remote code execution flaw in SGLang, an open-source inference engine, and ran code on one of NEAR AI’s inference servers last Sunday.

The attacker could also have seen requests being processed on that server that day, includin… Continue reading SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents and About 100 Users→

Posted in Uncategorized