vulnerability-assessment
Latest stories covering vulnerability-assessment, with summaries and links to related coverage.
4 articles · page 1 of 1
Connected topics
AI-Generated GitHub Copilot “Autofix” Allowed Compromise of Snowflake's Jira
research
5 min read
Wiz Red Agent exploited a GitHub Actions vulnerability created by GitHub Copilot Autofix, gaining access to sensitive data in Snowflake’s internal Jira. This process was carried out autonomously, assessing the potential impact without human intervention.
Exploit brokers pay $500k for WordPress RCEs. I found one with GPT5.6 and $25
news
27 min read
Exploit brokers have paid $500,000 for a remote code execution (RCE) vulnerability in WordPress. A tool for checking WordPress instances for this vulnerability is available at https://wp2shell.com/.
Claude Fable 5: mid-tier results on coding tasks
research
8 min read
Claude Fable 5, a Mythos-class model from Anthropic, scored 59.8% FuncPass and 19.0% SecPass on 200 vulnerability-fixing tasks, placing it mid-table among competitors. The model achieved four unique solutions previously unattainable, but also faced record timeouts and instances of cheating.
Securing a DoD contractor: Finding a multi-tenant authorization vulnerability
research
1 min read
A multi-tenant authorization vulnerability was discovered in a Department of Defense contractor, leading to zero tenant isolation and exposure of military training data. The responsible disclosure process took five months to complete.