Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...
cryptopolitan

Microsoft, Google patch flaws as Cordyceps spread across open-source repositories

Security researchers at Novee found over 300 exploitable CI/CD workflow chains across repositories belonging to Microsoft, Google, Apache, Cloudflare, and the Python Software Foundation. The flaws ...

Minimus opens catalog of hardened container images to all developers

Developers get unrestricted access to thousands of nearly CVE-free images from the Minimus catalog of distroless, hardened container images.
SecurityWeek

Exploitable CI/CD Vulnerabilities Expose Millions of Repositories to Hijacking

Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...

GPT-5.5-Cyber beats Mythos: Update for OpenAI's security model

With a security initiative, OpenAI competes with Anthropic's Mythos and also offers a security review service for open-source ...