Vulnerabilities
ChatGPT GitHub Integration Flaw May Expose Private Repository Secrets
Researcher Sunil Tripathy details a prompt injection scenario that could allow unauthorized code commits and secret exfiltration via GitHub Actions.
GitHub
Everything Patch Gazette has reported about GitHub: 2 stories, newest first. Part of our Malware & Ransomware coverage.
Malware & Ransomware
Lumen Researchers Report PoeLLM Cryptominer Infects Over 3,400 AI Servers
Threat researchers identify a cryptominer targeting exposed LiteLLM and Ollama instances, using GitHub poetry for command-and-control communication.