⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More
60
60
60
60
60
60
60
60
60
60
Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR
Wiz's autonomous Red Agent found and exploited a GitHub Actions injection in a Copilot-assisted PR, reaching Snowflake's internal Jira without human help.
Wiz's Red Agent autonomously discovered a GitHub Actions injection flaw in a GitHub Copilot-assisted pull request, five days after the flaw went live. It exploited the flaw to validate access to sensitive data in Snowflake's internal Jira, bypassing detection by GitHub Advanced Security, and assessed the blast radius without human intervention. The exercise demonstrates agentic AI performing end-to-end offensive security operations against production systems.
60
60
60
60
60
60
60
Researcher Explains Release of Undisclosed Zero
60
60
60
60
60
60
60
60
60
60
60
60
60
60
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal
60
Week in review: GitHub breached via poisoned VS Code extension, critical NGINX flaw exploited
60
60
60
60
60
60
60
60