Google AI Agent Development Kit CI/CD Flaw
Google's AI Agent Development Kit (adk-samples) had a CI/CD vulnerability enabling attacker code execution and repository takeover via pull requests.
Category: Cyber Products
Cybersecurity products, tools, platforms and software categories.
Apache Doris Zero-Click CI/CD Attacks
Apache Doris was vulnerable to zero-click CI/CD attacks that allowed code execution and credential theft through pull request comments.
Cloudflare Workers SDK CI/CD Exploit
Cloudflare Workers SDK had a CI/CD vulnerability where crafted branch names in pull requests could execute arbitrary commands on CI runners.
Python Black Tool CI/CD Vulnerability
The Python Software Foundation's Black tool had a CI/CD flaw allowing pull requests to execute attacker code and steal automation tokens.
Lantronix EDS5000 Series: Serial-to-IP Converters
The Lantronix EDS5000 Series are serial-to-IP converters affected by a critical code injection vulnerability (CVE-2025-67038) that is being actively exploited.
Ubiquiti UniFi OS: Network Operating System
Ubiquiti UniFi OS is a network operating system affected by multiple critical vulnerabilities (CVE-2026-34908, CVE-2026-34909, CVE-2026-34910) that are being actively exploited.
Cisco Catalyst SD-WAN: Software-Defined Wide Area Networking
Cisco Catalyst SD-WAN is a networking solution that provides secure, cloud-managed WAN connectivity. It was the target of zero-day exploits CVE-2026-20245, CVE-2026-20127,…
Adblock for YouTube: Chrome Extension with Dormant Script Injection
Adblock for YouTube is a Chrome extension with over 10 million installs that blocks ads on YouTube. It was found to have…
Adblock for Chrome: Removed Malicious Extension
Adblock for Chrome was a related extension removed from the Chrome Web Store for malware. It is associated with the same developer…
Adblock for You: Removed Malicious Extension
Adblock for You was a related extension removed from the Chrome Web Store for malware. It is associated with the same developer…