The z80 technique reveals the source code for Atlassian's 'rovo' AI assistant(ghuntley.com)

9 points by ghuntley 1 year ago | 3 comments

DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage(micahflee.com)

622 points by micahflee 1 year ago | 173 comments

Blog post by Micah Lee about DDoSecrets publishing 410 GB of heap dumps hacked from TeleMessage's archive server.

Accessing private GitHub repositories via MCP(invariantlabs.ai)

98 points by gokhan 1 year ago | 25 comments

GitHub MCP exploited: Accessing private repositories via MCP(invariantlabs.ai)

477 points by andy99 1 year ago | 287 comments

Invariant Labs blog post describing a vulnerability in the official GitHub MCP server that lets attackers access private repository data via AI agent prompt injection.

Going down the rabbit hole of Git's new bundle-URI(blog.gitbutler.com)

278 points by chmaynard 1 year ago | 87 comments

How GitHub gave every repository a durable owner(github.blog)

76 points by ascertain 3 months ago | 25 comments