#appsec

AI-powered fuzzing with the GitHub Security Lab Taskflow Agent↗

github.blog Nov 6, 2026 appsec ai tooling notes
GitHub’s model for secret detection: Finding more secrets with less noise↗

github.blog Nov 6, 2026 appsec cloud identity ai tooling notes
Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure↗

cloud.google.com Nov 6, 2026 appsec cloud cti supply-chain notes
ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft↗

cloud.google.com Nov 6, 2026 appsec incident vuln apt ransomware cti cve-2026-35273 shinyhunters unc6240 campaign-targeting notes
Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers↗

thehackernews.com Nov 6, 2026 appsec cloud vuln malware ai chrome-extension browser notes
mSecure password manager hack prompts password reset warnings↗

bleepingcomputer.com Nov 6, 2026 appsec incident vuln identity privacy dlp notes
Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It↗

thehackernews.com Nov 6, 2026 appsec vuln cve-2026-83844 notes
Threat actors use agentic AI tooling to find and abuse exposed secrets↗

microsoft.com Nov 6, 2026 appsec cloud vuln identity ai privacy artex cti tooling notes
Making HTTP header injection critical with one prompt↗

portswigger.net Nov 6, 2026 appsec research vuln tooling notes
Critical Rails Bug Threatens to Derail Vulnerable Servers

darkreading.com Nov 5, 2026 appsec vuln privacy supply-chain notes
The model isn't cooperating

portswigger.net Nov 5, 2026 appsec research ai notes
Truffle Security launches program to revoke 1.4 million live secrets

bleepingcomputer.com Nov 5, 2026 appsec vuln identity privacy tooling dlp notes
OpenSSH flaw lets attackers log into password-disabled Linux accounts

bleepingcomputer.com Nov 5, 2026 appsec vuln identity supply-chain notes
How to fix a bug in a fix

projectzero.google Nov 5, 2026 appsec vuln notes
Scalable Vector Grief

portswigger.net Nov 5, 2026 appsec research vuln browser notes