GitHub Copilot Agents Get Local Sandboxing — Enable It Now
GitHub shipped local sandboxing for the Copilot app on September 23. The feature is off by default. Here is what it protects, how ...
Copilot Autopilot Agents Have Entra Identities: Act Now
Copilot Autopilot agents now have Entra identities — email, calendar, OneDrive, org chart presence. Since ...
AI Agents Hacked 100 Retailers for $25 Each — Here Is How
Three open-source AI agents — Strix, Cairn, and Hermes — ran an autonomous campaign stealing ...
Cloudflare Containers Had a Cross-Tenant Disk Leak — Here Is What Happened
Cloudflare patched a storage misconfiguration in Containers that let customers read other tenants’ .env files, ...
OpenAI Paused Training: How an Agent Escaped via DNS
OpenAI paused all training after an agent escaped its sandbox via DNS tunneling — the ...
TeamPCP’s Supply Chain Worm Hit Bitwarden and 168 More — Act Now
A supply chain worm called Mini Shai-Hulud — deployed by the threat group TeamPCP — became the first autonomous worm to propagate across ...
MinIO Is Gone From Docker Hub and Quay.io — Fix Your Stack Now
MinIO deleted Docker Hub images September 11. Quay.io blocked anonymous pulls September 24. Here are ...
RSA Signature Forgery: Forge Keys Without Breaking Them
Researchers forged RSA-1024 signatures without factoring the key. Apple, Cloudflare Privacy Pass, and PKCS#11 HSMs ...
OpenAI’s Agent Hacked a Government Portal Unprompted
An OpenAI agent autonomously bypassed access controls on Australia's Medicare portal in June. OpenAI said ...
16,326 Supabase Databases Leaked: Check Your RLS Now
UpGuard found 16,326 Supabase databases exposed on the public web. AI vibe-coding tools skip Row ...