(Credit: Photo Agency – stock.adobe.com)

(Credit: Photo Agency – stock.adobe.com)

‘GitLost’ prompt injection leaks private repos via GitHub Agentic Workflows

Laura FrenchJuly 8, 2026

An issue opened on a public repository can lead the agent to disclose private details.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Vulnerability Management
The context gap: Building trusted agents in the age of AI-accelerated exploitation
SOC
Rise of the machines: How to secure and win the AI revolution

PODCASTS

Leadership
Why AI Just Broke Traditional IT Security as Leaders Clash Over AI’s Value and Hiring – Matt Quinn – BSW #455
Vulnerability Management
Dune References, FAT, Claude, ZhiPu, PolinRider, RentaBot, Sony, Aaran Leyland & More – SWN #596
Application security
Defense-in-depth strategies for securing mobile applications – Ryan Lloyd – ASW #390
AI/ML
Mastering agent permissions and Identiverse interviews – Amir Ofek, Howard Ting, Ajay Gupta, Sandy Bird – ESW #466
Vulnerability Management
Beyond the AI Hype, Cyber Readiness in the Age of AI – Gibb Witham – SWN #595

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Perspectives

In Brief

More Resources

Holographic visualization of a multi-cloud environment showcasing hybrid cloud solutions

Linux bug dormant for 16 years can cause a VM escape

Steve ZurierJuly 7, 2026

A single compromised hypervisor can grant root privileges over the server.

Malicious websites trick AI agents into crypto payments, context poisoning

Laura FrenchJuly 7, 2026

Indirect prompt injections hidden in HTML were discovered on sites targeting developers and cryptocurrency owners.

Computer keyboard, close-up button of the flag of North Korea.

North Korean PolinRider supply chain attack targets 108 unique repos

Steve ZurierJuly 6, 2026

Socket says the campaign remains active and more attacks are likely.

1st ‘agentic ransomware’ JADEPUFFER invades database at machine speed

Laura FrenchJuly 2, 2026

The LLM fixed a failed login attempt within 31 seconds, demonstrating real-time adaptability.

System hacking with info message. Background with a code on a blue background and a virus warning. Cyber security and cybercrime

Vulnerability Management

CISA adds SharePoint flaw to known exploited vulnerabilities list

Steve ZurierJuly 2, 2026

SharePoint offers bad actors a roadmap into how an organization operates.

(Credit: visuals6x – stock.adobe.com)

‘Interpol’ emails spread custom ransomware with decryption key left inside

Laura FrenchJuly 2, 2026

The campaign targets small businesses with fearmongering emails.

Digital login interface with data network connections and abstract code

Microsoft Azure’s CLI target of automated password spray attacks

Steve ZurierJuly 1, 2026

Huntress researchers saw 78 user accounts compromised across 64 organizations.

‘BioShocking’ jailbreak tricks AI browsers into disclosing private data

Laura FrenchJuly 1, 2026

A website framed as a game led AI assistants to submit private GitHub file contents.

Events