Tech Times on MSNOpinion

Cursor patched a silent repo-poisoning zero-day with no advisory and no CVE

Cursor IDE zero-day vulnerability: AI security firm Mindgard spent seven months trying to report a Windows code-execution ...
SDxCentral

Musk pledges ‘total transparency’ after xAI’s coding agent exposed entire repositories

Elon Musk has pledged that X’s codebase will be made open source days after it was discovered that the platform’s Grok coding ...

SpaceXAI Open-Sources Grok Build After Privacy Backlash

SpaceXAI open-sourced Grok Build under Apache 2.0 after privacy backlash over broad directory uploads from its terminal AI ...
eWeek

Grok Build Sent Full Git Repositories to the Cloud, Researcher Finds

Grok Build uploaded full Git repositories to xAI cloud storage before xAI disabled the behavior and Musk pledged to delete ...
The Hacker News

ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories

This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...
techtimes

Grok Build Open-Sourced After Covert Upload: Code to Exfiltrate Repos Stays In

xAI open-sourced its Grok Build terminal coding agent on Wednesday under the Apache 2.0 license, releasing 844,530 lines of Rust to GitHub hours after the tool's covert full-repository upload behavior ...
Microsoft

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...
SecurityWeek

Unpatched Cursor Vulnerability Exposes Users to Code Execution

An unpatched vulnerability in Cursor on Windows could allow attackers to achieve code execution via malicious repositories.

Fake GitHub Repositories: Infostealer Instead of Security or Developer Tools

A good 290 GitHub repositories, allegedly from security vendors, tool manufacturers, and other companies, are distributing ...
MUO on MSN

I put my computer’s internet traffic on a map, and I didn’t expect what I found

I expected neat lines pointing to websites, but TapMap showed me the infrastructure my laptop was really talking to ...
techtimes

7 Best GitHub Repositories for Modern Database Systems, SQL Tools, and Data Engineering

GitHub hosts a wide range of database repositories that support developers working with database systems, SQL tools, and modern data engineering workflows. These open source database tools help power ...
CPO Magazine

Megalodon Supply Chain Attack Infects Over 5,500 GitHub Repositories with Backdoors and Stealers

A massive supply chain attack infected over 5,500 GitHub repositories to steal user secrets, including CI secrets, cloud credentials, SSH keys, OIDC tokens, and source code secrets, and upload them to ...