GitHub is restructuring its bug bounty program to enhance collaboration with the security research community and improve overall platform safety. Changes to the program aim to better recognize and reward researchers for identifying and reporting vulnerabilities.

Cursor IDE executes malicious git.exe files from the root of a project repository without user interaction or prompts. This vulnerability allows repeated execution of the planted malicious file, posing a significant security risk.

A vulnerable React Native app was created to test if large language models (LLMs) could exploit common vulnerabilities. The app is a book review platform where the objective is to locate a flag within a user's private reviews.