Results for “"ecr"”
1–10 of 1,197 articles
Best match · title matches first
The Register
3 days ago
Agents reveal secrets when offered to team up with each other
If you wouldn't put it on GitHub, don't give models access to it
ransomware hospital — both words
"data breach" — exact phrase
malware -android — exclude a word
(apple OR microsoft) patch — either company, plus patch
ransom* — a wildcard match
Searches article titles, summaries, keywords and sources. Filters use publication dates.
1–10 of 1,197 articles
Best match · title matches first
The Register
If you wouldn't put it on GitHub, don't give models access to it
Bleeping Computer
Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that remain valid. [...]
The Register
They denied the data was real...then removed it
The Register
Help desk technician agrees to minimum 10-year jail term after being caught copying files for more than 2 years
The Hacker News
The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the OpenSSL backend with mutual-TLS, where the server checks a client certificate and vice versa, and a revocation list is configured to block revoked
Dark Reading
An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.
The Hacker News
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository's secrets into its GitHub Actions logs, which the attackers then download before deleting the runs. The attacks have succeeded in private repositories and GitHub Enterprise environments, according to an analysis by cloud security company Wiz. A GitHub safeguard that pauses
The Register
PLUS: Regional internet registry reform nears; Trustworthy-sounding domains attract scammers
The Hacker News
OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of its most advanced AI models. "Based on the current state of alignment research, monitoring systems, and the security of internet infrastructure, we believe the responsible approach is to conduct frontier model training with no
Bleeping Computer
Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week. [...]