Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...

In Test: Elixir's 1.20 New Intelligent Type System

Report do def user_age_to_string(user) do Integer.to_string(user.age) end end # An anderer Stelle im Projekt: Report.user_age_to_string(%{age: "42"}) Integer.to_string/1 is Elixir's usual notation for ...

Got a spare PC? How to open-source your smart home - for free

Once you've added a device, you can then control it from the Home Assistant dashboard. You can add as many areas and devices ...
cryptopolitan

Microsoft, Google patch flaws as Cordyceps spread across open-source repositories

Security researchers at Novee found over 300 exploitable CI/CD workflow chains across repositories belonging to Microsoft, Google, Apache, Cloudflare, and the Python Software Foundation. The flaws ...

The maker of ChatGPT wants to make open-source projects less of a security bargain

As AI tools flood open-source maintainers with low quality bug reports, OpenAI's new Patch the Planet initiative aims to filter out the noise and fix real threats.

OpenAI: Yoo-hoo, look over here, we do that security stuff too!

Speaking of Codex: OpenAI on Monday released a Codex Security plugin⁠ that the company says “enables out-of-the-box defensive ...