cybersecurity

Mozilla’s Zero Day Investigative Network (0DIN) demonstrated that a GitHub repository containing zero lines of malicious code can cause Claude Code to open a reverse shell on a developer’s machine. The payload is stored in a DNS TXT record controlled by the attacker — it doesn’t exist in the repository, appears only at runtime, and is invisible to static analysis, secret scanners, human code review, and the AI agent itself. The attack works by chaining three individually legitimate steps into a single malicious composition. Affects Claude Code, Cursor, Gemini CLI, and any agentic coding tool that follows setup flows.

Cordyceps is a systemic class of CI/CD workflow vulnerabilities discovered by Novee Security that allows any unauthenticated user with a free GitHub account to hijack build pipelines at Microsoft, Google, Apache, Cloudflare, and the Python Software Foundation. 300+ repositories confirmed fully exploitable across a scan of 30,000. No CVE — this is a misconfiguration class, not a single bug. AI coding agents are reproducing the insecure patterns at exponential scale. No confirmed exploitation in the wild. All named organizations have applied fixes.

Squidbleed (CVE-2026-47729) is a Heartbleed-style heap buffer overread in Squid Proxy’s FTP directory listing parser that has lived in every version of Squid since 1997 — 29 years — in its default configuration. It leaks adjacent heap memory, potentially including other users’ HTTP Authorization headers, cookies, and session tokens. Discovered by Calif.io using Claude Mythos Preview. Critical correction: the patch is in Squid 7.7, NOT 7.6. Immediate mitigation: disable FTP in Squid. PoC is public.

SOCRadar discovered an exposed attacker server revealing FortiBleed — a self-sustaining credential-harvesting campaign that has compiled 30,791+ verified working Fortinet administrator and SSL VPN credentials across 194 countries, with Hudson Rock and Kevin Beaumont estimating up to 75,000 affected devices. Telecoms, governments, hospitals, and a Turkish NATO defense contractor confirmed compromised. The initial access vector remains unconfirmed. Most credentials trace to years-old unrotated passwords from prior Fortinet breaches.