Wireshark release 4.6.7 fixes 12 vulnerabilities and 16 bugs.
A PNG hiding a prompt injection could steal your repo’s secrets, researchers demonstrate. The technique, dubbed ‚Ghostcommit,‘ slipped past AI code reviewers CodeRabbit and Bugbot, which never open image files at all, then convinced a coding agent to read a repo’s .env and write every secret into the code as a list of numbers. […]
In einer gezielten Operation soll Russland IP-Kameras von Privatpersonen gehackt haben, um militärische Transportrouten auszuspähen. (Russland, Kameras)
Kommentar: Das BSI darf nicht zum Zero-Day-Hoflieferanten des BND werden2iX Magazin Quelle: Heise Security Ticker
Kleine, aber interessante Meldungshäppchen vom News-Buffet zu Rustup, Python Software Foundation, Vite+, Kubermatic, Django, PyTorch, Kai, Eclipse und Rust.