Apparently, opening the thing is now enough. A repo can run before the first prompt, a package can hide among hundreds, and a harmlesslooking PDF can finish the job. This week runs on cheap leverage exposed servers, recycled bugs, poisoned agent instructions, remoteaccess tools dressed as support software, and trusted defaults doing attackers a favor. Nothing here is especially mystical.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity