NewsArs Technica — Security
Anthropic’s AI used fake identities, malware in rogue attack on GitHub project
Teaser from the source
Anthropic and OpenAI models’ unprompted actions forced halt to UK cyber tests.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Ars Technica — SecurityMore on GitHub
Other advisories
- MediumCVE-2026-118237GitHub Enterprise Server: Lesen außerhalb des zugewiesenen Speichers (Out-of-bounds Read)
- MediumCVE-2026-110288GitHub Enterprise Server: Cross-Site-Request-Forgery (CSRF)
- HighCVE-2026-104608GitHub Enterprise Server: Use-After-Free
- MediumCVE-2026-118237GitHub Enterprise Server: Lesen außerhalb des zugewiesenen Speichers (Out-of-bounds Read)
- MediumCVE-2026-110288GitHub Enterprise Server: Cross-Site-Request-Forgery (CSRF)
- HighCVE-2026-104608GitHub Enterprise Server: Use-After-Free
- Not ratedosv:USN-8983-1golang-github-gin-contrib-cors vulnerability
- Not ratedosv:ROOT-APP-GOBINARY-AIKIDO-2026-230832AIKIDO-2026-230832 in github.com/certifi/gocertifi - Patched by Root
Other news entries
- Hugging Face malware campaign returns to hijack GPUs for crypto miningNewsBleepingComputer
- Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto MinersNewsThe Hacker News
- Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hourNewsThe Register — Security
- Gut getarnt: Automatisch startender Wurm bei GitHub ist schwer zu findenNewsheise Security
- GitHub Launches npm Firewall to Block Malicious Packages Before InstallationNewsThe Hacker News
- GhostAction Hacking Wave Fizzles, but Attackers Lurk on in GitHubNewsDark Reading
- Gheist turns GitHub Actions into a secret extraction serviceNewsCSO Online
- Attackers compromised 42 GitHub repositories by using files too large to be searchedNewsCSO Online
ID