NewsThe Register — Security
Zombie instructions on carefully constructed web pages could trick GitHub Copilot CLI into sharing secrets
Teaser from the source
Run the CLI in autopilot mode and take your chances
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on GitHub
Other advisories
- Not ratedosv:CLEANSTART-2023-TQ13876Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1
- Not ratedosv:CLEANSTART-2024-CO02071Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5
- Not ratedosv:CLEANSTART-2024-CR84542Denial of Service in GitHub repository radareorg/radare2 prior to 5
- Not ratedosv:CLEANSTART-2024-DT97874Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5
- Not ratedosv:CLEANSTART-2024-BR28735Out-of-bounds Read in GitHub repository vim/vim prior to 8
- Not ratedosv:CLEANSTART-2024-BT10413Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8
- Not ratedosv:CLEANSTART-2024-AO39581Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8
- Not ratedosv:CLEANSTART-2024-DZ29192Use After Free in GitHub repository vim/vim prior to 8
Other news entries
- Hugging Face malware campaign returns to hijack GPUs for crypto miningNewsBleepingComputer
- Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto MinersNewsThe Hacker News
- Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hourNewsThe Register — Security
- Gut getarnt: Automatisch startender Wurm bei GitHub ist schwer zu findenNewsheise Security
- GitHub Launches npm Firewall to Block Malicious Packages Before InstallationNewsThe Hacker News
- GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHubNewsDark Reading
- Gheist turns GitHub Actions into a secret extraction serviceNewsCSO Online
- Attackers compromised 42 GitHub repositories by using files too large to be searchedNewsCSO Online
ID