Topic

#Vulnerability

6 articles on Vulnerability — news, releases, guides and analysis from the SourceFeed engine.

The MCP Security Blind Spot in AI Coding Assistants

A high-severity flaw in Amazon Q Developer highlights how repository-carried configuration files are turning simple git clones into cloud compromises.

Emeka Okafor

The Cordyceps Exploits: Why Your CI/CD Pipelines Are Wide Open

A systemic workflow composition flaw exposes hundreds of major repositories, proving we must stop treating CI/CD as passive configuration.

Article · 5d ago0

GitHub Hardens actions/checkout to Block Pwn Request Attacks

The latest security update stops common pipeline exploits but leaves structural CI/CD risks for developers to manage.

Article · 6d ago0

Anatomy of a 27-Year-Old OpenBSD Authentication Bypass

A simple validation omission in OpenBSD's PPP stack shows how easily decoupled memory bounds can compromise system security.

Article · 1w ago0

Critical Ivanti Sentry RCE Under Active Exploitation

A maximum-severity unauthenticated command injection vulnerability in Ivanti Sentry is being actively targeted following a public exploit release.

News · 2w ago0

How an Insecure Update Flow Exposed AMD Systems to RCE

A trivial MITM vulnerability in AMD's AutoUpdate tool highlights the risks of ignoring transport security in software updates.

Article · 2w ago0