Critical GitHub RCE bug exposed millions of repositories

A critical remote code execution (RCE) vulnerability in GitHub could potentially allow attackers to execute arbitrary code on GitHub.com and GitHub Enterprise Server. Uncovered by Wiz researchers, the now-patched bug exploited how GitHub handles server-side “git push” operations. By crafting malicious input within a standard Git push, an authenticated user could execute arbitrary commands via GitHub’s…

Read More

10 essential release criteria for launching AI agents

NASA’s launch-a-rocket activity includes 490 launch-readiness criteria to ensure that all ground and flight systems are prepared for launch. Having a launch-readiness checklist ensures that all operational and safety systems are ready, and validations begin long before the countdown on the launchpad. The most advanced devops teams automate their release-readiness checklists in advanced CI/CD pipelines….

Read More

Kilo targets shadow AI agents with a managed enterprise platform

Kilo has launched KiloClaw for Organizations, a managed version of its OpenClaw platform aimed at enterprises seeking more control over how employees deploy AI agents for tasks such as repository monitoring, email drafting, and calendar management. Co-founded by GitLab co-founder Sid Sijbrandij and Scott Breitenother, Kilo is building open-source coding and AI agent tools and…

Read More

Malicious Hugging Face model masquerading as OpenAI release hits 244K downloads

A malicious Hugging Face repository posing as an OpenAI release delivered infostealer malware to Windows systems and logged 244,000 downloads before being removed, raising fresh concerns about how enterprises source and validate AI models from public repositories. The repository, named Open-OSS/privacy-filter, impersonated OpenAI’s legitimate Privacy Filter release, copied its model card almost word-for-word, and included…

Read More