Tracing Backdooring the next release of Codex through GitHub Action pipeline exploit chaining×Refreshed just now
Defense3 days
Vertical
- All verticals
- Space
- Energy
- Quantum
- Robotics
- Cybersecurity
- Biotechnology
- Defense Tech
- Artificial Intelligence
In the News
One card per story, every outlet that covered it96h agoWiz ResearchGitHub Actions Security Pt 2: AI-Powered Actions Analysis | Wiz BlogWiz Research details security bypasses and secret-exfiltration risks in AI-powered GitHub Actions such as claude-code-action, codex-action, and run-gemini-cli, and offers recommendations.1 outletCyber15 linked 3d agoYahooAdvocacy groups sue AI giants to freeze new models, warning of 'catastrophic' risksFour advocacy groups filed a California civil suit asking a court to freeze AI model training and deployments at five major AI developers until safeguards are in place. AI166 linked5 articles · 2 outlets
- 3d agoYahooPickupAdvocacy groups sue AI giants to freeze new models, warning of 'catastrophic' risks
- 3d agoYahooPickupOpenAI, Google, Anthropic hit with lawsuit seeking halt to frontier AI development
- 3d agoAl JazeeraEarliestUS nonprofits sue tech giants to halt AI development
- 2d agoYahooPickupMajor AI developers can't control their own tech, lawsuit alleges
- YesterdayYahooPickupOpenAI, Anthropic, Google and Other AI Giants Face Lawsuit Demanding Development Freeze
2d agoWiz Research · research by WizSoftware Supply Chain Security: Key Risks and Best Defenses | WizWiz's free Scan for Good initiative, built with Google DeepMind and CISA, has surfaced more than 475 high and critical exposures across public sector, healthcare and open-source environments. Cyber169 linked15 articles · 2 outlets · TechTarget
- 5d agoWiz ResearchPickupTowards a better cloud vulnerability response model | Wiz Blog
- 4d agoTechTargetPickupScan for Good: Free AI security tool finds nearly 500 critical flaws
- 4d agoWiz ResearchSecret-based cloud supply-chain attacks: Case study and lessons for security teams | Wiz Blog
- 2d agoWiz ResearchPickupClaude Mythos and Cybersecurity: What Actually Changes? | Wiz
- 2d agoWiz ResearchPickupSoftware Supply Chain Security: Key Risks and Best Defenses | Wiz
- 6h agoWiz Research“Black October” for AI Developer Platforms | Wiz Blog
- 6h agoWiz ResearchPHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blog
- 6h agoWiz ResearchGitHub Actions Security Pt 1: Attacks & Defenses | Wiz Blog
- 6h agoWiz ResearchGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles | Wiz Blog
- 6h agoWiz ResearchScan for Good: Finding Critical Exposures with AI | Wiz Blog
- 6h agoWiz ResearchHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz Blog
- 6h agoWiz ResearchScan for Good: AIを活用した重大な露出の特定 | Wiz ブログ
- 6h agoWiz ResearchArtifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 | Wiz Blog
- 6h agoWiz ResearchBreaking LiteLLM: From Auth Bypass to Cloud Compromise | Wiz Blog
- 6h agoWiz ResearchPickupA U.S. Navy Cloud Broker enhances cloud security with Wiz | Wiz
3d agoThe RegisterOpenAI launches security products, tells orgs they’re doomed if they don’t use themOpenAI unveiled Daybreak Red Team and Daybreak Defense Factory under its Daybreak security platform, arguing companies can only stay secure by using frontier AI models for defense, as a nonprofit coalition sued to block more capable AI development.1 outletCyberAI22 linked 4d agoEuronewsAnthropic targets valuation of up to $1.4 trillion for blockbuster IPOAnthropic seeks to sell 825 million shares at $70–$78 each in an IPO trading as ANT, with seven tech companies committing $26 billion in a private placement.1 outlet61 linked 4d agoDepiBackdooring the next release of Codex through GitHub Action pipeline exploit chainingDepi researchers disclose a prompt-injection-to-supply-chain exploit chain in OpenAI Codex's GitHub Action workflows, claiming they could have poisoned the publishing pipeline for the @openai/codex npm package.1 outletCyber1 linked 4d agoAxiosThe AI industry's week from hellAnthropic cut its IPO ambitions to a valuation of up to $1.4 trillion as a broad AI market selloff, Nvidia's espionage scandal, and Democratic midterm gains weighed on the industry.1 outletAI41 linked 13d agoSemafor · research by Tech Oversight ProjectElection ‘war rooms’ enter the AI ageOpenAI's policy rebrand of data centers as "compute campuses" and push for a mandatory AI testing bill drew skeptical reactions from lawmakers and AI safety advocates. AIIncoming Democrats eye AI safety push in new Congress36 linked13 articles · 3 outlets · The Hill
- 13d agoSemaforElection ‘war rooms’ enter the AI age
- 12d agoSemaforPickupPolitical opposition to data centers mounts in US and abroad
- 12d agoSemaforEarliestOpenAI pushes policy rebrand to a skeptical audience
- 12d agoSemaforPickupDemocrats run more anti-tech ads amid AI boom
- 11d agoSemaforBig Tech braces for a bluer Washington
- 11d agoSemaforConservative group issues warning on AI
- 10d agoSemaforDemocrats are fired up on AI. Consensus is harder.
- 10d agoSemaforWhere AI money worked in the midterms
- 6d agoSemaforAI safety groups outline their plans for a new Washington
- 6d agoYahooPickupAI safety groups outline their plans for a new Washington
- 4d agoSemaforPickupUS data center construction to remain strong in 2027
- 4d agoThe HillTech watchdog lays out Democratic agenda for first 100 days
- 2d agoSemaforTrump’s AI task force discusses cyber risks
6d agoFederal News NetworkI audit tech companies for a living. The White House Accord needs rules for people like me.Patrick Sullivan, an A-LIGN executive, argues in Federal News Network that the White House Accord on Super Intelligence needs rules for who qualifies as an independent AI auditor before companies start naming their own.1 outletAI17 linked
On the Hill
Congress, the White House and agencies0Nothing in Hill activity is connected to this.
Nothing from this branch in view.
Times ET
Contracts
Solicitations, SBIR topics, grants and awards0Nothing in contracts is connected to this.