Sign in as anyone: Bypassing SAML SSO authentication with parser differentials(github.blog)

282 points by campuscodi 1 year ago | 111 comments

Kerberoasting(blog.cryptographyengineering.com)

179 points by feross 1 year ago | 61 comments

Claude Code is steganographically marking requests(thereallo.dev)

2318 points by kirushik 3 months ago | 692 comments

Blog post reporting that inspecting Claude Code revealed hidden system prompt markers that vary based on the API base URL and the user's timezone.

Cisco Can't Stop Using Hard-Coded Passwords(schneier.com)

154 points by pabs3 3 years ago | 77 comments

We found 24 Android vulnerabilities using our open source AI security agent(github.blog)

6 points by fourfire 27 days ago | 2 comments

GitHub Blog post describing how GitHub's open source AI security agent and its taskflows found 24 Android app vulnerabilities, and how to run it yourself.

Hackers infect ISPs with malware that steals customers' credentials(arstechnica.com)

53 points by trelane 2 years ago | 16 comments