Entrar
Fake ChatGPT and Claude Apps Use Signed Executables to Install Yoba Malware
5 de Novembro de 2026, 08:15
Fake ChatGPT and Claude apps spread Yoba malware through GitHub, using signed executables to load a cryptominer on…
Visualização normal
Antes de ontemHackread – Latest Cybersecurity, Tech, Crypto & Hacking News
-
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News
-
Fake ChatGPT and Claude Apps Use Signed Executables to Install Yoba Malware
Fake ChatGPT and Claude apps spread Yoba malware through GitHub, using signed executables to load a cryptominer on…
-
-
Fake GitHub Repo Tricks AI Agents Into Installing SolanaCry Malware
A fake GitHub repository tricks AI coding agents into installing SolanaCry malware, giving attackers remote access to developers’ Windows PCs through NetSupport.
Fake GitHub Repo Tricks AI Agents Into Installing SolanaCry Malware
30 de Outubro de 2026, 11:12
A fake GitHub repository tricks AI coding agents into installing SolanaCry malware, giving attackers remote access to developers’ Windows PCs through NetSupport.
-
-
Placeholder Domains Used by 349 AI Agent Skills Found Redirecting to Scams
Manifold Security found placeholder domains cited in 359,000 GitHub files and 349 AI agent skills serving cloaked scam…
Placeholder Domains Used by 349 AI Agent Skills Found Redirecting to Scams
26 de Setembro de 2026, 16:02
Manifold Security found placeholder domains cited in 359,000 GitHub files and 349 AI agent skills serving cloaked scam…
-
-
Black Hat USA 2026: One GitHub Issue Could Compromise Major AI Coding Workflows
At Black Hat USA 2026, Novee found GitHub workflow flaws in Claude Code, Gemini CLI and Codex that enabled RCE, credential theft and agent control in pipelines.
Black Hat USA 2026: One GitHub Issue Could Compromise Major AI Coding Workflows
6 de Agosto de 2026, 07:49
At Black Hat USA 2026, Novee found GitHub workflow flaws in Claude Code, Gemini CLI and Codex that enabled RCE, credential theft and agent control in pipelines.
-
-
GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data
Noma Labs details GitLost, a prompt injection flaw that made GitHub's AI agent expose private repo data through a crafted public issue and guardrail failures.
GitLost: GitHub’s AI Agent Tricked Into Leaking Private Repository Data
7 de Julho de 2026, 10:00
Noma Labs details GitLost, a prompt injection flaw that made GitHub's AI agent expose private repo data through a crafted public issue and guardrail failures.
