Researchers managed to steal GitHub OAuth tokens by abusing a command injection vulnerability.

What happens when researchers think outside the box? Data gets exfiltrated through DNS.

ChatGPT and Codex flaws patched Feb 2026 exposed DNS exfiltration and GitHub tokens, raising enterprise AI security risks.

Command injection in Codex and a hidden outbound channel in ChatGPT exposed risks of credential theft and covert data ...

Hardware manufacturer Zyxel quietly released an update fixing a critical vulnerability that gives hackers the ability to control tens of thousands of firewall devices remotely. The vulnerability, ...

OpenAI patches ChatGPT vulnerability that allowed silent data exfiltration and fixes Codex flaw exposing GitHub tokens.

The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has added three new flaws in its Known Exploited Vulnerabilities (KEV) catalog, including a critical OS command injection impacting ...

Cisco is warning of a critical security vulnerability found in its Unified industrial Wireless Software for Cisco Ultra-Reliable Wireless Backhaul (URWB) access points that could allow an ...