Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...
Dark Reading

Cursor IDE Auto-Executes Malicious Code in Poisoned Repos

Researchers reported the flaw to Cursor in December, but it still remains in the popular AI coding platform and can be used ...

Experts warn hackers are using AI chatbots to write malware using natural language

How do you spot an attack when signatures and behaviors can no longer be used?

Forget typosquatting; slopsquatting is the software supply chain threat created by AI coding tools

Slopsquatting represents an emerging supply chain threat made possible by AI hallucinations. As developers increasingly rely ...

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit, ...
SecurityWeek

Network of 200 GitHub Repositories Used for Malware Infection

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.
Windows Report

Windows 10/11 GameGuard error: What it is and how to fix it

No multiplayer gamer likes cheaters. The playing field show is leveled so that everybody can enjoy the gaming experience. Fortunately, cheaters have to face anti-cheating and anti-hacking software ...
GitHub

sdupdates 2 backup.md

1. Ckpts/hypernetworks/embeddings are ==not== interently safe as of right now. They can be pickled/contain malicious code. Use your common sense and protect yourself ...