NewsMicrosoft Threat Intelligence
Trained to betray: How post-training supply chain attacks hijack coding agents
More on Trained
Other advisories
- HighCVE-2026-8331An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by acces…
- Not ratedosv:CVE-2026-124999braindecode Hub Integration base.py EEGModuleMixin._from_pretrained path traversal
- MediumCVE-2026-124999A security vulnerability has been detected in braindecode up to 1.8.2. This affects the function EEGModuleMixin._from_pretrained of the file braindecode/mode…
- MediumCVE-2026-115298Incorrect Authorization (CWE-863) in Elasticsearch can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1).…
- MediumCVE-2026-115295Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained …
- MediumCVE-2026-120334A flaw has been found in deepset-ai farm up to 0.8.0. This impacts the function EmbeddingTokenizer.from_pretrained of the file farm/modeling/tokenization.py …
- Not ratedosv:CLEANSTART-2025-LK57103Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service
- Not ratedosv:CLEANSTART-2025-BF99954Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates
Other news entries
- When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer DiagnosisNewsSecurityWeek
- Cyberattack AIs must be trained only on air-gapped systems, hundreds of AI researchers sayNewsCSO Online
- Why AI agents are like the dog that pushed kids into the SeineNewsCSO Online
- The democratization of cyber warfare — and what it means for CISOsNewsCSO Online
- Capsule Security Launches ‘AI Circuit Breaker’ to Stop Rogue AgentsNewsSecurityWeek
- Carhartt data breach affects 12.9M, half of what ShinyHunters claimedNewsThe Register — Security
- OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit DevelopmentNewsThe Hacker News
- 6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026NewsThe Hacker News
ID