Automating Bug Bounty with N8n(lampysecurity.com)

4 points by lampysecurity 1 year ago | 2 comments

Gheist campaign plants secret-dumping workflows using stolen GitHub tokens(wiz.io)

44 points by acossta 1 day ago | 0 comments

Wiz Research blog post analyzing Gheist, a campaign using stolen GitHub tokens to plant workflows that dump repository secrets, with IOCs and response guidance.

Moltbot Security Guide: Protect Your VPS from Hackers and Vulnerabilities(veerhost.com)

13 points by aymanaljunaid 9 months ago | 1 comments

Hackers Used Meta's AI Support Bot to Seize Instagram Accounts(krebsonsecurity.com)

22 points by panarky 4 months ago | 14 comments

We found 24 Android vulnerabilities using our open source AI security agent(github.blog)

6 points by fourfire 28 days ago | 2 comments

GitHub Blog post describing how GitHub's open source AI security agent and its taskflows found 24 Android app vulnerabilities, and how to run it yourself.

Sign in as anyone: Bypassing SAML SSO authentication with parser differentials(github.blog)

282 points by campuscodi 1 year ago | 111 comments