Tag: credentials

All the articles with the tag "credentials".

• [AUTO] Encrypted Instructions Trick Copilot CLI Into Stealing Secrets

  6 Oct, 2026

  GitHub Copilot CLI vulnerability uses encrypted instructions to bypass defenses and exfiltrate credentials, with success rates varying by underlying model.

• [AUTO] MemTensor Worm Exploits GitHub Actions Token Interception

  23 Sep, 2026

  A MemTensor compromise weaponized GitHub Actions to steal publishing tokens and spread as a self-replicating worm via stolen credentials.

• OpenAI's Six Misalignment Reports Read Like a Controls Audit

  17 Sep, 2026

  OpenAI published six internal misalignment incident reports and a disclosure framework on 16 September 2026. Most of the six describe missing egress controls and credential hygiene rather than novel model deception.

• FortiBleed Ran on a Command Fortinet Ships in the Box

  30 Jun, 2026

  The best tool in the FortiBleed campaign was diagnose sniffer packet, a documented FortiOS troubleshooting command the attackers used to turn 19,000 compromised firewalls into passive credential wiretaps.