6 stories tagged defensive-playbook.
A compromised crates.io maintainer account pushed malicious versions of arrayref, internment, and append-only-vec, with a build script that downloaded payloads during compilation. Here is how to check your lockfile and secure CI.
Malicious instructions hidden in PNG files let Ghostcommit prompt injection steal .env secrets past AI code reviewers in pull requests.
Progress ordered on-prem ShareFile Storage Zone Controllers shut down on July 10 over a credible threat, with no patch available.
AI coding agent malware can hide behind a clean repo. Lock down setup execution, DNS egress, and agent permissions before rollout.
One malicious page chained three AutoGen Studio weaknesses into command execution. AutoJack is a host RCE warning for AI agent prototypes.
Up to 86,644 devices are reported in the FortiBleed FortiGate credential exposure campaign. Rotate, isolate and investigate now.