A misconfigured AWS CodeBuild webhook allowed bypass of actor ID checks, risking takeover of four AWS GitHub repositories ...

Wiz researchers investigated and found the core of the flaw, a threat actor ID bypass due to unanchored regexes, and notified ...

Prompt injection for the win Anthropic has fixed three bugs in its official Git MCP server that researchers say can be ...

Three vulnerabilities in Anthropic’s MCP Git server allow prompt injection attacks that can read or delete files and, in some ...

Update to the latest version and monitor for unexpected .git directories in non-repository folders, developers are told.

The vulnerability was spotted in August 2025, so users should patch now.

North Korean-linked hackers targeted more than 3,100 IP addresses tied to AI, crypto, and finance firms using fake job interviews, security researchers said.

Anthropic’s official Git MCP server hit by chained flaws that enable file access and code execution - SiliconANGLE ...

North Korean-linked hackers have targeted more than 3,100 IP addresses tied to AI, crypto, and finance firms through fake job interviews. The campaign used frau ...

Developers have identified references to an unidentified “MODEL1” in DeepSeek’s GitHub repository, suggesting preparations for a new flagship model. The ...

Build pgit once, then generate a browsable, syntax-highlighted “Code” view for any repo you can host locally or anywhere, ...

Researchers found the popular model context protocol (MCP) servers, which are integral components of AI services, carry ...