Explore

Rapid Read Rapid Read
Critical Vulnerability in Gemini CLI Exposes Systems to Supply Chain Attacks

Critical Vulnerability in Gemini CLI Exposes Systems to Supply Chain Attacks

A critical vulnerability has been discovered in Gemini CLI, an open-source AI agent, which allowed for remote code execution and potential supply chain attacks. The flaw was identified by Novee Security researchers and has since been patched by Google. The vulnerability stemmed from Gemini CLI's automatic trust of the current workspace folder, which allowed malicious configurations to execute arbitrary commands on the host system. This posed a significant risk as attackers could access sensitive information and credentials. The vulnerability was particularly concerning in CI/CD pipelines, where it could facilitate supply chain attacks by exploiting the trusted execution privileges of AI coding agents.
Trendline Trendline
Critical Vulnerability in Gemini CLI Exposes Supply Chain to Attacks

Critical Vulnerability in Gemini CLI Exposes Supply Chain to Attacks

Critical Vulnerability in Gemini CLI Exposes Supply Chain to Attacks
Trendline Trendline
SAP npm Package Attack Exposes Vulnerabilities in Developer Tools

SAP npm Package Attack Exposes Vulnerabilities in Developer Tools

SAP npm Package Attack Exposes Vulnerabilities in Developer Tools
Rapid Read Rapid Read
LiteLLM Vulnerability Exploited Shortly After Disclosure

LiteLLM Vulnerability Exploited Shortly After Disclosure

A critical vulnerability in the LiteLLM open source AI gateway was exploited shortly after its disclosure, allowing attackers to access sensitive database information. The flaw, identified as CVE-2026-42208, involves an SQL injection during the proxy API key verification process. Attackers targeted database tables containing API keys and credentials, although no further exploitation was observed. The vulnerability was addressed in LiteLLM version 1.83.7, which users are advised to update to. The incident underscores the importance of timely patching and vulnerability management in software development.
Trendline Trendline
GitHub Patches Critical RCE Vulnerability Affecting Millions of Repositories

GitHub Patches Critical RCE Vulnerability Affecting Millions of Repositories

GitHub Patches Critical RCE Vulnerability Affecting Millions of Repositories
Reuters Reuters
AI customer service startup Netomi raises $110 million

AI customer service startup Netomi raises $110 million

NEW YORK, April 30 (Reuters) - Technology startup Netomi has raised $110 million in a Series C funding round led by Accenture Ventures, the startup’s chief executive told Reuters this week.
Trendline Trendline
Mandiant Warns of Security Risks in AI Integration for Enterprises

Mandiant Warns of Security Risks in AI Integration for Enterprises

Mandiant Warns of Security Risks in AI Integration for Enterprises
Trendline Trendline
Checkmarx Confirms Data Theft in Supply Chain Attack Affecting Open Source Project

Checkmarx Confirms Data Theft in Supply Chain Attack Affecting Open Source Project

Checkmarx Confirms Data Theft in Supply Chain Attack Affecting Open Source Project
Trendline Trendline
CISOs Face New Challenges as Identity Management Enters the Agentic Era

CISOs Face New Challenges as Identity Management Enters the Agentic Era

CISOs Face New Challenges as Identity Management Enters the Agentic Era
Trendline Trendline
GitHub Patches Critical Remote Code Execution Vulnerability Affecting Millions of Repositories

GitHub Patches Critical Remote Code Execution Vulnerability Affecting Millions of Repositories

GitHub Patches Critical Remote Code Execution Vulnerability Affecting Millions of Repositories
Trendline Trendline
GitHub Vulnerability Exposes Millions of Repositories to Potential Exploits

GitHub Vulnerability Exposes Millions of Repositories to Potential Exploits

GitHub Vulnerability Exposes Millions of Repositories to Potential Exploits
Trendline Trendline
Open VSX Marketplace Extensions Linked to GlassWorm Malware Threaten User Security

Open VSX Marketplace Extensions Linked to GlassWorm Malware Threaten User Security

Open VSX Marketplace Extensions Linked to GlassWorm Malware Threaten User Security