Tag

remote code execution

5 articles

Latest in remote code execution

A Simple Website Summary Just Exposed the Limits of AI Coding Guardrails

Claude Code’s Auto Mode was bypassed in an attack chain that turned a routine webpage summary into remote code execution, highlighting the limits of AI agent guardrails.

Aug 31, 20263 min

All remote code execution Articles

Showing 1–5 of 5

Aug20

Critical Flaw in isolated-vm Can Lead to Sandbox Escape, RCE Threat

Developers for years have been using vm2, an open-source Node.js library, to run untrusted JavaScript inside a secure and isolated sandbox environment. It uses Node.js’s built-in m…

3 min

Apr21

Blogs

Critical Microsoft GitHub Flaw Highlights Dangers to CI/CD Pipelines: Tenable

A critical vulnerability in a popular Microsoft GitHub repository could allow a threat actor to easily exploit its CI/CD infrastructure to run arbitrary code in the repository and…

3 min

Jan29

DevSecOps

‘PackageGate’ Vulnerabilities Can Let Attackers Bypass Shai-Hulud Defenses

In the wake of the massive Shai-Hulud supply chain attack that ripped through npm late last year and compromised more than 700 packages and exposed 25,000 repositories, developers…

3 min

Jan23

Business of DevOps

N. Korea Contagious Interview Campaign Turns to VS Code to Deliver Backdoor

Jamf security researchers said state-sponsored espionage actors are using malicious VS Code projects to steal information.

3 min