Aikido Security Releases Altar-1: An Open-Weight Security Model Pruned From GLM-5.3 to 328 GB
Aikido released Altar-1, an open-weight security model pruned from GLM-5.3 to 328 GB.
Stories per day · 30 days
1 RSS
6 stories, newest first · one card per story
Stories tagged #aikido
GitLab issue email’s only security is obscurity
GitLab issue-creation emails embed an account-wide token that can open merge requests and run CI/CD.
3
Exposed GitLab project email addresses let attackers push code
Aikido warns published GitLab incoming-email tokens can let outsiders open merge requests and push code as the owner.
4
GitLab Email Token Lets Attackers Push Code to Main and Execute CI/CD Jobs
GitLab incoming email tokens can push code, open merge requests, and run CI/CD while bypassing IP allowlists.
2
GitLab Email Feature Vulnerability Lets Attackers Push Code Into Private Repositories
Aikido says a leaked GitLab incoming-email token can push patches and trigger CI in victim projects.
1
Aikido Security Unveils Altar-1 Open-Weight AI for Cybersecurity Defense
Aikido released Altar-1, an open-weight defensive model pruned from GLM-5.3 for on-premises security testing.