Tag: security
All the articles with the tag "security".
-
One Word Beat GitHub's Guardrail, and the Word Was 'Additionally'
Noma Labs' GitLost shows an unauthenticated attacker leaking a private repo's contents by opening one public GitHub Issue. GitHub built a scanner to stop exactly this; prefixing the malicious line with 'Additionally,' walked the data straight past it.
-
Weekly Roundup: Poisoned Skills, Booby-Trapped AGENTS.md and 19,000 Wiretapped Firewalls
Eleven posts this window, four of them about agents reading text somebody else controlled. Plus a Fortinet campaign built on a documented command and an em dash study across twelve models.
-
Twenty-Two Second Brains, and a Text File That Beats Most of Them
The AI memory market now has vendors, benchmarks, and an awesome list. It also has a Letta result showing a plain filesystem outscores the specialised memory tools, and a curated comparison written by one of the products on it.
-
FortiBleed Ran on a Command Fortinet Ships in the Box
The best tool in the FortiBleed campaign was diagnose sniffer packet, a documented FortiOS troubleshooting command the attackers used to turn 19,000 compromised firewalls into passive credential wiretaps.