Deschide articolul original într-un tab nou Schimbarea acestei opțiuni se aplică imediat și reîncarcă pagina.
LECTURA
Înapoi la articole →

John Stawinski IV

johnstawinski.com/feed/atom/
Vizitează site-ul

Cel mai recent articol

Ultima verificare

Urmăritori 0 urmăritori
Articole: 10

  1. Protected: Is it An Issue? TOCTOU to Prompt Injection in OpenAI’s Codex Cloud Code Review

    (John Stawinski IV)

    This post is password protected.

  2. Repo-jacking Anthropic’s Claude Community Plugins (And the SHAs That Saved Them)

    (John Stawinski IV)

    Several Claude Community Plugins were vulnerable to repo-jacking.

  3. Trusting Claude With a Knife: Unauthorized Prompt Injection to RCE in Anthropic’s Claude Code Action

    (John Stawinski IV)

    An external attacker could submit a pull request to any repository using Claude Code Action, wait for a reviewer to trigger the action, and then replace the PR title with a prompt injection payload, resulting in remote code execution within a privileged G…

  4. Agent of Chaos: Hijacking NodeJS’s Jenkins Agents

    (John Stawinski IV)

    When multiple DevOps platforms work together to execute pipelines for a single GitHub repository, it begs the question: Do these platforms get along?

  5. CodeQLEAKED – Public Secrets Exposure Leads to Supply Chain Attack on GitHub CodeQL

    (John Stawinski IV)

    A potential supply chain attack on GitHub CodeQL started simply: a publicly exposed secret, valid for 1.022 seconds at a time.

  6. Living as a Digital Nomad in Innsbruck, Austria

    (John Stawinski IV)

    In July 2022, I stepped off the train in Innsbruck, Austria, during a six-week backpacking trip.

  7. Black Hat and DEF CON Preview: “Grand Theft Actions” or “Continuous Integration, Continuous Destruction”?

    (John Stawinski IV)

    In one week, me and Adnan Khan will have the privilege of speaking at Black Hat USA and DEF CON 32.

  8. Fixing Typos and Breaching Microsoft’s Perimeter

    (John Stawinski IV)

    Progressing through certifications, developing as a red teamer, breaking into Bug Bounty — many steps along my security journey have been difficult.

  9. Playing with Fire – How We Executed a Critical Supply Chain Attack on PyTorch

    (John Stawinski IV)

    Security tends to lag behind adoption, and AI/ML is no exception.

  10. Worse than SolarWinds: Three Steps to Hack Blockchains, GitHub, and ML through GitHub Actions

    (John Stawinski IV)

    Six months ago, my friend and colleague Adnan Khan started researching a new class of CI/CD attacks.