'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit, ...
Tech Times

GitHub Copilot Breaks Agent Barrier: Free Desktop App, JetBrains, Cost Controls

GitHub also launches Codex as an agent provider in JetBrains IDEs and rolls out AI credit pools giving enterprise admins ...
Security Boulevard

GitGuardian Power for Amazon Kiro: Secrets Detection Built Into the Agent

GitGuardian is now live on the Kiro Powers marketplace. Install the Power once, and Kiro's agent scans for exposed secrets ...
GitHub

TeNPy: Tensor Network Python

TeNPy (short for 'Tensor Network Python') is a Python library for the simulation of strongly correlated quantum systems with tensor networks. The philosophy of this library is to get a new balance of ...

New tool gives CLIs a warm and GUI feeling instead

Now, you can let a simple open-source CLI module turn any command into a GUI for you instead. That’s the solution Jordanian ...
Bleeping Computer

ChocoPoc malware delivered via trojanized exploits on GitHub

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...
MUO on MSN

I fixed Claude's memory problem with a Postgres database and it changed everything

My AI stopped having goldfish syndrome.

For the 2nd time in weeks, Microsoft packages laced with credential stealer

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...
VentureBeat

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...
VentureBeat

Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps

Any development environment that installed or imported one of the 172 compromised npm or PyPI packages published since May 11 should be treated as potentially compromised. On affected developer ...