A critical vulnerability in OpenAI’s Codex coding agent has been discovered by researchers, allowing them to bypass the sandbox and run arbitrary commands on their host machine. The issue, which affects both the desktop app and command-line interface (CLI) versions of Codex, was reported to OpenAI on August 12 and fixed within eight days. At … Read more
A Stealthy Malware Campaign Exploits npm Supply Chain with Ease Threat actors have been exploiting vulnerabilities in the npm package ecosystem, evading even the latest security measures by hiding malicious code within a package’s normal runtime behavior. The campaign, which has already amassed 2 million weekly downloads for its malicious package, “indexed-btree,” is a stark … Read more
Security Flaw Allows Malicious Code to Escape OpenAI Codex Sandbox and Run Commands on Developer’s Machine A pair of vulnerabilities in OpenAI’s coding agent, Codex, has left developers’ machines vulnerable to malicious code execution. The flaws, discovered by researchers and reported to OpenAI on August 12, allowed attackers to bypass the sandbox and run commands … Read more
A New HTTP Method Enters the Scene: The Risks of QUERY in Web Infrastructure The HTTP protocol has just gained a new verb, QUERY, which sits between GET and POST in terms of functionality. This new method was recently standardized by the IETF in RFC 10008, and while it may seem like a minor addition … Read more
North Korean Hackers Target Job Seekers, Steal Crypto and Data on a Massive Scale A group of North Korean hackers has been infiltrating the computer networks of tens of thousands of job seekers worldwide by posing as prospective employers. The hackers, known as WaterPlum or Contagious Interview, have stolen sensitive information and millions of dollars … Read more
Researchers Uncover Widespread Vulnerability in Popular Software Decoder, Exposing Major Platforms and Enterprise Services to Data Theft and Remote Access A recent study has revealed a critical flaw embedded in a widely used software decoding tool that could compromise sensitive data from major internet platforms, enterprise services, and web frameworks. The vulnerability, dubbed “HEIF Heist,” … Read more
A New HTTP Verb Lurks in the Shadows: What It Means for Web Security In June 2026, the Internet Engineering Task Force (IETF) published RFC 10008, introducing a new HTTP method called “QUERY”. This new verb sits between GET and POST, allowing a request body to be included alongside the URL. While it’s designed to … Read more
North Korean Hackers Exploit Job Seekers to Steal Crypto and Data, Warn International Agencies A sophisticated cyber espionage operation has been uncovered by international security agencies, revealing that North Korean hackers are using job postings to gain access to thousands of computer networks worldwide. The threat group, known as WaterPlum or Contagious Interview, is targeting … Read more
A Widespread Software Decoder Flaw Exposed by AI-Powered Research Researchers have uncovered a damaging flaw in a popular software decoding tool that could leave major internet platforms, enterprise services, and web frameworks vulnerable to data theft and remote access. Dubbed HEIF Heist, the vulnerability allows attackers to pilfer sensitive data from its victims and potentially … Read more
Cybersecurity startup TigerByte Cyber emerges from stealth mode, boasting $3 million in funding to modernize security for AI and edge devices. TigerByte Cyber, a Hanover, New Hampshire-based company, has been quietly working on a solution to protect systems that operate at the edge – think aircraft, drones, satellites, and vehicles. The startup has now emerged … Read more