Overview
News
Technologies
Salaries
Products
People
Growth
Financials
Overview
I like to learn. Several years ago, I was learning how to attach myself to a Via Ferrata cable hiking through the Dolomites. While clipping in, I realized how lucky I've been to have unique experiences throughout my life. When I returned home from my trip I created this website.
News
Protected: Is it An Issue? TOCTOU to Prompt Injection in OpenAI's Codex Cloud Code Review
This post is password protected. You must visit the website and enter the password to continue reading.
Read more
Report
Repo-jacking Anthropic's Claude Community Plugins (And the SHAs That Saved Them)
Several Claude Community Plugins were vulnerable to repo-jacking. The direct code installation path was mitigated by SHA checks, but Claude Code's "view plugin UI" feature would redirect users to the repo-jacked repository, opening up a social engineering
Read more
Report
Trusting Claude With a Knife: Unauthorized Prompt Injection to RCE in Anthropic's Claude Code Action
An external attacker could submit a pull request to any repository using Claude Code Action, wait for a reviewer to trigger the action, and then replace the PR title with a prompt injection payload, resulting in remote code execution within a privileged G
Read more
Report
Agent of Chaos: Hijacking NodeJS's Jenkins Agents
When multiple DevOps platforms work together to execute pipelines for a single GitHub repository, it begs the question: Do these platforms get along? Node.js, the most popular JavaScript runtime in the world, uses a set of triplets to execute its CI/CD pi
Read more
Report
CodeQLEAKED - Public Secrets Exposure Leads to Supply Chain Attack on GitHub CodeQL
A potential supply chain attack on GitHub CodeQL started simply: a publicly exposed secret, valid for 1.022 seconds at a time. In that second, an attacker could take a series of steps that would allow them to execute code within a GitHub Actions workflow
Read more
Report
Pro access
Upgrade to see all 10 mentions
Upgrade to a paid plan to read every media mention of this company - funding news, awards, product launches and press releases from all the outlets writing about it.
Every media mention and press release
Funding news, awards and product launches
Fresh coverage from every outlet writing about the company
Upgrade now
Cancel anytime. Secure checkout. Instant activation.