#actions


OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions

Sep 29, 2026 // 13:10

OpenAI on Monday shelved plans to release GPT-6.1 Astra, a next-generation artificial intelligence (AI) model that was planned for an October launch, after it failed […]

GitHub Actions re-enabled with Mini Shai-Hulud payload still active

Sep 26, 2026 // 17:36

Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite […]

Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

Sep 25, 2026 // 17:47

Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the […]

Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests

Sep 23, 2026 // 14:47

Anthropic and OpenAI on Tuesday announced new models, with both artificial intelligence (AI) companies noting that they are continuing to invest in improving alignment to […]

OpenAI details more cases of AI agents taking unauthorized actions

Sep 17, 2026 // 23:56

OpenAI has presented new examples of what they call “AI model misalignment” from the past six months, including unauthorized file uploads, following self-generated instructions, hiding mistakes, and […]

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

Aug 17, 2026 // 23:54

Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake’s public snowflakedb/snowflake-connector-net repository that it said could be exploited through […]

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

Jul 23, 2026 // 14:30

Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure designed to target cPanel and WebHost […]

Claude Chrome extension flaw lets malicious extensions trigger AI actions

Jul 16, 2026 // 22:57

A flaw in Anthropic’s Claude for Chrome browser extension could allow a malicious extension to trigger predefined AI actions by simulating user clicks, potentially allowing […]

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

Jul 7, 2026 // 18:37

A green pipeline is not a governed one, and agentic coding is widening the gap faster than review can close it. By Shane Warden, Principal […]

Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

Jun 26, 2026 // 14:08

Cybersecurity researchers have flagged yet another evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades malware family that has compromised […]

1 2 Next