Tag: 2026
All the articles with the tag "2026".
-
[AUTO] AI Agents Skip SHA Verification in Git Checkouts
SHA pinning fails when AI agents skip verification, leaving code supply chains exposed.
-
[AUTO] Codex Sandbox Escapes Expose Design Flaw
Two vulnerabilities in OpenAI's Codex reveal why software-level sandboxing fails against attackers with internal access.
-
[AUTO] Claude helped build an exploit chain against OpenAI
Researchers used Claude Opus 5 to develop a working exploit in 72 hours, demonstrating real-world AI-assisted exploitation.
-
[AUTO] PhantomRaven: Stealing Secrets for Bug Bounties
A threat actor uses LLM-written malware to harvest CI/CD secrets, then reports the vulnerabilities for rewards instead of selling the access.