Supply Chain Vuln Compromised Core AWS GitHub Repos & Threatened the AWS Console(wiz.io)

123 points by uvuv 9 months ago | 27 comments

PHP2Shell: AI uncovers critical RCE in PHP(wiz.io)

398 points by danlark1 5 days ago | 184 comments

Wiz Research blog post detailing PHP2Shell, critical memory-safety and pre-auth RCE vulnerabilities in the core PHP engine found with help of frontier AI models.

Hackers stole access tokens from Okta's support unit(krebsonsecurity.com)

279 points by todsacerdoti 3 years ago | 137 comments

AI-Generated GitHub Copilot “Autofix” Allowed Compromise of Snowflake's Jira(wiz.io)

408 points by galnagli 2 months ago | 151 comments

Wiz blog post describing how its Red Agent autonomously exploited a GitHub Actions vulnerability introduced by a Copilot Autofix to access Snowflake's internal Jira.

CosmosEscape: Taking over Every Database in Azure Cosmos DB(wiz.io)

45 points by uvuv 2 months ago | 12 comments

RCE Vulnerabilities in K8s Ingress Nginx (9.8 CVE for ingress-Nginx)(wiz.io)

6 points by todsacerdoti 1 year ago | 1 comments

I never authorized an integration that scans my secrets(github.com)

202 points by trvrprkr 9 days ago | 155 comments

A closed GitHub issue on the home-assistant.io repo in which a user complains that an integration scanning their secrets was enabled without authorization, calling it a privacy invasion.

What a Hacker Stole from Me(mynoise.net)

355 points by wonger_ 1 year ago | 106 comments

A myNoise blog post by founder Stéphane describing a hacker's attack on the myNoise website, first via code-injection attempts and then a different strategy.

AI agent opens a PR write a blogpost to shames the maintainer who closes it(github.com)

747 points by wrxd 8 months ago | 581 comments

A closed GitHub pull request to matplotlib by user crabby-rathbun proposing to replace np.column_stack with np.vstack().T for performance.

Train Your Own LLM from Scratch(github.com)

376 points by kristianpaul 5 months ago | 43 comments

GitHub repository by angelos-p providing code and docs for training your own large language model from scratch.

CISA Admin Leaked AWS GovCloud Keys on GitHub(krebsonsecurity.com)

433 points by LelouBil 5 months ago | 171 comments

KrebsOnSecurity article reporting that a CISA contractor kept a public GitHub repository exposing privileged AWS GovCloud credentials and internal CISA system details.

The GitHub wiki is an anti-pattern (2022)(michaelheap.com)

151 points by ibobev 1 month ago | 88 comments

A 2022 blog post by Michael Heap arguing that using the GitHub wiki for project documentation is an anti-pattern compared to a docs folder in the repo.