Coverage tagged "GitHub".
An enterprise mail server authenticates users, stores private communications, delivers recovery links, runs calendars, and sends mail that employees and other systems trust. Compromising it can…
GitHub has trained a credential classifier to improve generic secret detection and reduce false alerts. The new pipeline cut median post-push scan execution time by 86% and model serving costs by…
Dans le coin droit : gratuit, open source, fort de 678 étoiles sur GitHub, champion incontesté de l'agentique sous IDA et prétendant sérieux sur Binary Ninja, voici Rikugan ! Face à lui, encore…
arXiv:2610.14431v1 Announce Type: new Abstract: Long-term memory enables LLM agents to learn from past interactions but exposes memory formation to adversarial influence. Existing studies primarily…
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a…
Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.
Today, Sonar is announcing bulk import support for Azure DevOps and Bitbucket in SonarQube Cloud. Administrators can now import every repository in an Azure DevOps or Bitbucket organization into…
Bloom Security researchers found that npm’s Trusted Publishing feature let an attacker push new versions of someone else’s package without stealing a credential. The attacker only needed to register…
arXiv:2610.12540v1 Announce Type: new Abstract: Agents that investigate and decide on enterprise security reason over a machine-readable view of the environment: its assets, identities…
arXiv:2610.12893v1 Announce Type: new Abstract: The rapid integration of Artificial Intelligence (AI) models has established a complex supply chain, but many of these shared artifacts harbor severe…
Python 3.15.0 added to actions/python-versions Bit of a niche link, but I've been waiting for this for a couple of days - I even told ChatGPT to check for it: Clone…
Posted by Alan Coopersmith on Oct 09 https://github.com/cyrusimap/cyrus-sasl/issues/891 points out there are a number of publicly reported security issues in the Cyrus SASL project, with no response…
Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over…
Posted by Stuart Henderson on Oct 09 It is unmaintained: https://github.com/uclouvain/openjpeg/commit/06bbae8b5d5e57f8c28fe862b80a9464b320e314 "This repository should be considered unmaintained…
arXiv:2610.10612v1 Announce Type: new Abstract: Agent skills combine instructions with executable resources, giving third-party packages access to an agent's runtime. Existing skill scanners inspect…
“I think we might lose public key cryptography.” ~Matthew Green The above is from Matthew Green, yesterday, who is a cryptographer at Johns Hopkins. OpenAI released over 700 mathematical proofs as a…
More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer.
We just did a major update to FOR577 and added a lot of new material on day 5 about investigating AI usage in incident response. In the new material we dicsuss 8 of the most popular AI coding…
Community-built AI agents, skills, and MCP servers are landing in SOC workflows fast. Here’s what the Exchange Inspector tests before a listing earns its vetted tag on the CyberAgents Exchange. Three…
Thousands of hijacked servers have been looking up their command and control (C2) server in a poem posted on GitHub, according to Black Lotus Labs. The malware reading it, dubbed PoeLLM, breaks into…
