Collaborate Disseminate
A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI runners behind Anthropic’s and Google’s own coding-agent repositories. On OpenAI’s, it was enough to hijack the next agent run.
Novee Security ran t… Continue reading Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets
A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has been compromising internet-facing infrastructure for years before training their sights on the s… Continue reading TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign
Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted… Continue reading New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst SD-WAN and IOS XE Software as part of a comprehensive internal security review.
The security issues affect Cisco Catalyst SD-WAN Software, regardless… Continue reading Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs
An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the predictor after the defense has run.
MIT CSAIL researchers Daniël Trujillo and… Continue reading New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs
Apparently, opening the thing is now enough. A repo can run before the first prompt, a package can hide among hundreds, and a harmless-looking PDF can finish the job.
This week runs on cheap leverage: exposed servers, recycled bugs, poisoned agent ins… Continue reading ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories
Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network.
Its August 3 scan counted 4,407 exposed Rockwell co… Continue reading Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Coinspect has identified CryptoJS.lib.WordArray.random() as the weak random number generator behind the Ill Bloom wallet drains.
Introduced in the JavaScript cryptography library 12 years ago, the function supplied weak entropy that affected wallet ap… Continue reading CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps
Cybersecurity researchers have disclosed a security issue with Apple’s iCloud Private Relay tool that can expose a user’s real IP address.
Introduced with iOS 15, iCloud Private Relay employs a dual-hop architecture to ensure users’ privacy by routing… Continue reading Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses
A new class of prompt injection is spreading across commercial websites. It requires no malware, no stolen credentials, and no zero-day exploit. It abuses a standard feature built into almost every major AI assistant: pre-filled deep links.
We observe… Continue reading AI Recommendation Poisoning: How “Ask AI” Buttons Silently Alter LLM Memory