One Click in github.dev Could Reach Every Repository the Developer Could.
A malicious notebook could turn github.dev into a GitHub OAuth-token theft path with read and write access across the developer's repositories.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
Google AI Threat Defense Tries to Connect Exposure, Detection and Remediation
Google’s new AI Threat Defense portfolio aims to connect threat intelligence, exposure context and code repair. Its value will depend on whether organisations can govern the decisions between those stages. Google announced AI Threat Defense on 27 May, presenting a…
The VPN Accepted the Cookie. The Attacker Entered Without Credentials.
Attackers exploited a GlobalProtect authentication-cookie bypass to obtain unauthorized VPN access before a public proof of concept appeared.
A Single Web Request Could Take Over Oracle Payments
Oracle fixed an unauthenticated HTTP flaw that could take over the Payments component in E-Business Suite 12.2.3 through 12.2.15.
The Patch Was Malware. FortiClient EMS Delivered It Like an Update
Attackers turned FortiClient EMS into a trusted malware-delivery system, pushing the EKZ credential stealer to managed endpoints as a fake vendor patch.
One Poisoned Extension Reached 3,800 of GitHub’s Internal Repositories
A compromised Nx Console update reached a GitHub employee device, stole credentials, and exposed roughly 3,800 internal repositories.
The Security Tool Became the Primitive: Defender Reached SYSTEM and Lost Availability
Two actively exploited Microsoft Defender flaws let local attackers reach SYSTEM or disrupt endpoint protection before automatic fixes arrived.
Microsoft’s AI Agents Found 16 Windows Vulnerabilities. The Workflow Matters More than the Score
Microsoft’s multi-model agentic security system offers a credible glimpse of faster vulnerability discovery—but its strongest lesson is the combination of specialised agents, tools and human validation. Microsoft has presented a multi-model agentic security system that uses more than 100 specialised…
Mini Shai-Hulud Turns Package Publishing into a Wormable Trust Path
A coordinated compromise of npm and PyPI packages shows how trusted publishing, CI caches and maintainer identities can combine into an automated supply-chain attack. Security researchers reported a new “Mini Shai-Hulud” campaign on 11 May involving trojanised packages in the…
The Exploit Needed a Foothold. Dirty Frag Turned It Into Root
Dirty Frag turned Linux kernel networking flaws into a reliable path from a low-privilege foothold to root across major distributions.