Vulnerability in Claude Code GitHub Action Allows Repository Hijacking
A flaw in Anthropic's Claude Code GitHub Action has been identified, enabling attackers to potentially take over public repositories by exploiting a single GitHub issue.
Tag prompt injection
Minor Edits to AI Skills Can Lead Agents Astray
Recent research highlights how seemingly small modifications to AI skills can create significant vulnerabilities, allowing agents to behave unpredictably.
Security Flaws in OpenClaw AI Agent Raise Data Exfiltration Concerns
Recent vulnerabilities in the OpenClaw AI agent could lead to significant security risks, including prompt injection attacks and data exfiltration, as highlighted by China's CNCERT.
RoguePilot Vulnerability in GitHub Codespaces Exposes Sensitive Tokens
A recently discovered vulnerability in GitHub Codespaces, dubbed RoguePilot, allows for potential exploitation through malicious instructions embedded in GitHub issues, leading to the leakage of sensitive data such as GITHUB_TOKEN.
