» Tag
vulnerabilities
42 postsHardware Backdoors: The Security Challenge Beneath the Cloud
Hardware backdoors represent serious threats to cloud security. This article discusses the risks and detection methods engineers need to consider.
Ollama Model Loading RCE: Three Years of the Same Bug Class
Ollama has revealed three remote-code execution vulnerabilities in model loading. Important security insights for engineers.
Your AI Code Reviewer Ran My Malware
AI code review tools can run malware due to security vulnerabilities. Learn more about these risks.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comThe Vibe Coding Hangover: AI Code Creates Vulnerabilities and Backdoors
Key insights on vulnerabilities and backdoors in AI-generated code. Important points for developers to consider.
AI Code Audit: 15 Security Flaws Claude Found in Production
An LLM-based security audit uncovered 15 OWASP-classified flaws-SQL/NoSQL injection, IDOR, path traversal-each shown with vulnerable and fixed code.
Innersource security advisories go GA
GitHub has made innersource security advisories generally available. This feature is a significant step in managing vulnerabilities more effectively.
Research Reveals Some RISC-V Chips Are Vulnerable to Spectre Attacks
Some RISC-V chips are found to be vulnerable to Spectre attacks, posing significant risks for engineers. Awareness and mitigation strategies are essential.
Near-autonomous AI agents attack Taiwan's nuclear safety agency
Details on the near-autonomous AI attack on Taiwan's nuclear safety agency.
Interstitial Risk: How Two Secure Systems Can Create One Vulnerable System
Interstitial risk in software highlights vulnerabilities between components that traditional scans miss, creating security blind spots for engineers.
CVE-2026-25089: Unauthenticated Command Injection in FortiSandbox
CVE-2026-25089 is a critical security vulnerability in FortiSandbox. Learn its significance and remediation steps.