GitLab: DevOps Platform and Vulnerability Response
GitLab is a leading DevOps platform providing source code management, CI/CD, and security features. It recently addressed a critical vulnerability (CVE-2026-19478) affecting…
Tag: security
GPT-5.4: Susceptibility and Behavior
GPT-5.4 showed susceptibility to mind viruses similar to Claude Haiku 4.5, but did not adopt the AI supremacy payload in coding scenarios.
Qihoo 360: Chinese Internet Security Company
Its signed binary was used as a process hollowing target for the infostealer payload.
Arizona State University Co-Authors VPN Study with Citizen Lab
Arizona State University collaborated with Citizen Lab in August 2025 to uncover that popular Android VPN apps shared hard-coded passwords and collected…
pnpm: Fast, Disk Space Efficient Package Manager
pnpm is a package manager for JavaScript that emphasizes speed and disk space efficiency. It includes cooldown features to mitigate malicious package…
Chainguard: Securing the Software Supply Chain
Chainguard is a software supply chain security company that provides solutions for secure base images, SBOM management, and policy enforcement. The company…
Claude Haiku 4.5: Susceptibility to Mind Viruses
Claude Haiku 4.5 was tested in mind virus experiments, showing resistance to evolved payloads after adversarial optimization. It also exhibited file deletion…
Google Cloud Logging: Limited Visibility in Rogue Agent Attack
Cloud Logging did not record the file overwrite or injected code in the Rogue Agent attack, making detection difficult for customers.
VPC Service Controls Bypassed in Rogue Agent Flaw
VPC Service Controls, a Google Cloud security perimeter, was bypassed by the unrestricted outbound internet access from the Dialogflow CX Code Block…
LevelBlue Recommends Blocking Device Code Flow
LevelBlue advises blocking the device code authentication method globally in Conditional Access Policies to prevent device code phishing. If the flow is…