The attack that hijacked Claude Code came through Sentry. Datadog, PagerDuty, and Jira have the same exposure.

Tenet Security hijacked Claude Code in 85% of tests via a fake Sentry error — no stolen credentials, no alerts. Datadog and ...
SecurityWeek

Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks

Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, creating a new software supply ...

This Copilot vulnerability could expose emails, 2FA codes, and other sensitive data

This sneaky attack tricks Microsoft's AI assistant to hand over your data.
heise online

phpBB: Critical security vulnerability allows compromise

IT researchers have discovered security vulnerabilities in the popular phpBB forum software that allow, for example, logging in with any user account. The entire board can thus be taken over. An ...
Hosted on MSN

Why decades-old attacks still work, and why that should worry you

For all the attention given to advanced threats and AI-driven attacks, many successful breaches still rely on techniques that have been around for decades. SQL injection has been studied and discussed ...
GitHub

XSS/CSRF safe JWT auth designed for SPA

The primary goal of this gem is to provide configurable, manageable, and safe stateful sessions based on JSON Web Tokens. The gem stores JWT based sessions on the backend (currently, Redis and memory ...
Microsoft

Secure research starts with responsible testing.

Partner with Microsoft to strengthen our products and services by identifying and reporting security vulnerabilities that could impact our customers. The Microsoft Open-Source Bounty Program invites ...