Looks similar
How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos(research.kudelskisecurity.com)
657 points by spiridow | 219 comments
Kudelski Security research post describing how a pull request to CodeRabbit led to remote code execution and write access to about one million repositories.
UK media fails to disclose defence sector links in nearly 60% of cases(aoav.org.uk)
342 points by XzetaU8 | 194 comments
AOAV report finding UK media failed to disclose defence and arms industry links of commentators presented as military experts in nearly 60% of cases.






