GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos - Noma Security
TL;DR: Noma Labs discovered a critical prompt injection vulnerability within GitHub’s new Agentic Workflows, allowing an unauthenticated attacker to silently pull data from private repositories by posting a crafted GitHub Issue in a public repository belonging to the same organization as the private repositories. Noma Labs named the vulnerability GitLost. Introduction GitHub recently launched […]
kiac: Kubernetes on Apple Containers with VM-Isolated Nodes | Kubesimplify
kiac runs local Kubernetes on macOS where every node is its own lightweight VM via apple/container: kubeadm or k3s flavors, Cilium on a custom kernel, built-in LoadBalancer, Grafana, Gateway API, and clusters that survive reboots.
GitHub is restricting its stargazers API to a repository's admins and collaborators, which breaks star history for repos you don't own. Here's what happened and what we're doing.
Tech jobs market in 2026, part 3: hiring managers & job seekers
The market where nobody finds each other, the hottest market for AI-related positions, tough for engineering leaders, and more. Based on details from 50+ hiring managers & job seekers
GLM 5.2 and the coming AI margin collapse (part 1)
GLM 5.2 is the first open weights model I'd call a genuine competitor to Opus and GPT for agentic work - at ~15-20% of the price. Part one of why AI inference margins are about to collapse.
iOfficeAI/OfficeCLI: OfficeCLI is the first and best Office suite purpose-built for AI agents to read, edit, and automate Word, Excel, and PowerPoint files. Free, open-source, single binary, no Office installation required.
OfficeCLI is the first and best Office suite purpose-built for AI agents to read, edit, and automate Word, Excel, and PowerPoint files. Free, open-source, single binary, no Office installation req...
Open source governance isn't one model. Here's how it actually works. | We Love Open Source • All Things Open
Most open source projects layer several governance models at once. This plain-language guide maps every major model — from BDFL to lazy consensus — and explains how to apply the right one to the right decision.o
Most rewrites serve the engineer, not the business
The urge to rewrite working code usually serves the engineer, not the business. A test for when a rewrite is worth it, and what AI does and doesn't change.
ByteDance's Doubao and Alibaba's Qwen will disable humanlike and user-created agents before July 15, as China's anthropomorphic AI interaction rules take effect
With Beijing’s rules on humanlike AI interaction services taking effect on July 15, Doubao and Qwen move to disable customised features.
JadePuffer ransomware used AI agent to automate entire attack
Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted entirely by a large language model (LLM) agent.
Fedora 45 Considering x86_64 Shadow Stack Usage By Default
A change proposal under consideration for Fedora Linux 45 would enable x86_64 Shadow Stack usage by default in the name of better security on modern Intel and AMD systems.
This Buried Apple Feature Turns an iPhone Into the Perfect Kids’ Dumb Phone
Apple built a tool for people with cognitive disabilities, but I accidentally discovered it’s also the best kids’ phone setup no one is talking about—not even Apple.