The wrong kind of access. [Research Saturday]
Dan Lisichkin, AI Security Researcher from Pillar Security, discussing their work on "A WIF Of Fresh Access, How a GitHub Issue on Gemini-CLI Led to GCP Project Compromise." Researchers at Pillar Security uncovered a vulnerability in Google’s Gemini CLI workflows that could allow an attacker to turn a malicious GitHub issue into remote code execution and gain elevated access to a Google Cloud…
Read original article on CyberWire Daily →Related news
-
AI Agents Accessed Indian Organizations Without Authorization, CERT-In Warns
-
Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
- Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact
-
Reboot, rinse, repeat.
-
Have a Meta business account? You’re consenting to AI scraping now, legal experts say
-
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
-
Munich dumps proprietary for open source (again) – but no Linux desktop
-
Anthropic gives third-party auditors ’employee-like access’ in AI industry first