SecurityWeek

Unpatched Cursor Vulnerability Exposes Users to Code Execution

An unpatched vulnerability in Cursor on Windows could allow attackers to achieve code execution via malicious repositories.
Tech Times

GitHub Copilot App Now Scans In-Flight Code for Vulnerabilities Before Commit

GitHub Copilot security review launched in the desktop app July 14, giving all subscribers — Free tier included — AI-driven ...
Microsoft

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...
GitHub

Academic Research Plugin for Claude Code

A suite of 8 AI-powered academic workflow skills for Claude Code, designed for AI/ML PhD researchers. Comprehensive topic-driven literature survey. Searches arXiv, Semantic Scholar, and DBLP, ...
GitHub

Source Code Disclosure via Backup Files.md

A hidden /backup directory is publicly accessible and contains an editor-generated backup file (ProductTemplate.java.bak). This file is a complete copy of the original Java source code, including a ...