2026-10-23T07:09:36Z https://njump.me Gadi Evron https://njump.me/npub1h9hd4daq5hu5h0gs8wv2ql5pm6hx8vr5h074k34vs7s8dx8rt2cs9uta2c https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/328/664/337/735/998/original/7ad3837cbc0abbe3.jpeg https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/328/664/337/735/998/original/7ad3837cbc0abbe3.jpeg https://njump.me/nevent1qqsxtm7jnkcre704qjuu2vtn8kjcsju565t25a7q3vpelckur46zmcczyzukak4h5zjljjaazqae3gr7s802ucaswjal6k6x4jr6qa5cuddtzqpf7mq Pwn day is a meme gift that keeps on memeing<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/489/475/383/915/565/original/e49c1784916eab0c.png"> <br/> 2026-10-23T09:18:45Z https://njump.me/nevent1qqsvd0ctjs63cxnaf4xfj6fu9tav8tvdgfqtmhv3k8wuc5kvth0kggqzyzukak4h5zjljjaazqae3gr7s802ucaswjal6k6x4jr6qa5cuddtzapwa3j In reply to <a href='/nevent1qqsz2cq3wjp4dwhps3htm2zdnh89uzjslxkxpzl5jhu3g3l5mdf3rzqqxvzjl'>nevent1q…vzjl</a><br/>_________________________<br/><br/>how do? 2026-10-16T12:35:45Z https://njump.me/nevent1qqs2tf70mql8q5elvyxqtez3gla5rs9zxxk03dzmnmr2rusz9dwyddszyzukak4h5zjljjaazqae3gr7s802ucaswjal6k6x4jr6qa5cuddtz2sy2jn Linus lays down the law, and says it like it is. May as well not use an editor, or a compiler. Why stop at AI?<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/450/435/944/043/844/original/62f240728f7ef65e.png"> <br/> 2026-10-16T11:50:35Z https://njump.me/nevent1qqsgmjea3lkxyapn8qfksrc556pp9d8rme2hxac5xu962wr3w5d92zczyzukak4h5zjljjaazqae3gr7s802ucaswjal6k6x4jr6qa5cuddtzutmers The [un]prompted State of AI Cybersecurity report - an analysis of the 490 talks submitted to the [un]prompted 2026 call for papers.<br/><br/>Who submitted, what they work on, and what changed since March.<br/><br/>See you all at [un]prompted. 27-29 October (this month!)<br/><br/>Many thanks for the work you put into this, Rob T. Lee and Indre Altman!<br/><br/>Report:<br/><a href="https://unpromptedcon.org/wp-content/uploads/2026/10/unprompted-state-of-ai-cybersecurity-2026_PRINT-1.pdf">https://unpromptedcon.org/wp-content/uploads/2026/10/unprompted-state-of-ai-cybersecurity-2026_PRINT-1.pdf</a> 2026-10-13T13:46:10Z https://njump.me/nevent1qqsyad5tw9fq0lvvtk5npajt303uggp9e3huew0tdc7zm5xcxlm8q9szyzukak4h5zjljjaazqae3gr7s802ucaswjal6k6x4jr6qa5cuddtz7xsr4j “The AI Reversing Panel: Are we all powerful, or out of a job?” I moderated at <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1n7sc80ra5hl8dscmm782aj054fedfg2ujma7gjph7276ts84zuesgr2c7j" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Recon</span> (<span class="italic">npub1n7s…2c7j</span>)</a></span> is now out on YouTube.<br/><br/>REcon doesn’t often do panels, but Hugo Fortier asked us to do our best - and we said yes.<br/><br/>We’re all trying to figure out the future of security, research, and what to do next. Is the future all about being super hackers, or re-skilling as washing machine technicians?<br/><br/>My deepest appreciation to our panelists:<br/>John McIntosh, Marion Marschalek, and Aaron Portnoy<br/><br/>To those joining us over Zoom in the middle of their night:<br/>Thomas Dullien and Thai Duong<br/><br/>Guests:<br/>Dragos Ruiu and Sergey Bratus <br/><br/>Video:<br/><a href="https://www.youtube.com/watch?v=iDJDmie8XaQ">https://www.youtube.com/watch?v=iDJDmie8XaQ</a><br/><br/>With a special note of thanks to our editors:<br/>Ido Kenan Nathan Van Horn 2026-09-16T10:49:59Z https://njump.me/nevent1qqsz36ng59v4spgejc37mfrj5klet82q28y29qwe3wg3ts8tkvarr2gzyzukak4h5zjljjaazqae3gr7s802ucaswjal6k6x4jr6qa5cuddtznqyc7r You have until the 8th at 23:59 to submit to unprompted! What are you waiting for?<br/><br/><a href="https://unpromptedcon.org/">https://unpromptedcon.org/</a> 2026-09-07T15:38:02Z https://njump.me/nevent1qqszjftfhqe8exw52s47qtcra7tdatg8lw4tkmg2jvcsw0y8aawhlzqzyzukak4h5zjljjaazqae3gr7s802ucaswjal6k6x4jr6qa5cuddtzvtur84 We discovered a new active VS Code extensions attack campaign we dub SaassyCode, so far targeting users of Trello and Roblox, with two malicious extensions discovered so far.<br/><br/>While similar in operation to the GitHub breach-related extension, we haven&#39;t drawn any connection between the two attacks, and they should be treated as separate.<br/><br/>Discovery was done automatically by Knostic&#39;s AgentMesh (<a href="https://agentmesh.knostic.ai/">https://agentmesh.knostic.ai/</a>).<br/><br/>Both currently known campaign extensions have now been removed from the VS Code marketplace.<br/><br/>To be clear: the third party malicious extensions are not related to the vendors.<br/><br/>The dropper architecture is identical between the two, with same staged filename, same execution chain, and different payload domain.<br/><br/>Follow-on analysis of both final-payload chains confirms the same builder/operator toolkit (shared crypter family, IntelDriver persistence, ::/@ dual-blob carving, base64+XOR → iEx loader); the two extensions are two distinct campaign instances.<br/><br/>You can find more information and IoCs, in our blog:<br/><a href="https://www.knostic.ai/blog/new-vs-code-extensions-attack-campaign-saassycode-managerblx-trelloblox">https://www.knostic.ai/blog/new-vs-code-extensions-attack-campaign-saassycode-managerblx-trelloblox</a><br/><br/>--<br/>And as always, if you&#39;d like to defend your agents and coding assistants, along-side their supply chain from extensions and MCP servers to skills, do hit me up for a demo of Knostic. Or, check us out here:<br/><a href="https://knostic.ai/demo">https://knostic.ai/demo</a> 2026-06-01T14:01:41Z https://njump.me/nevent1qqsvd0ell8g4fgrhx8k907as3me5rxt297lh56lkef5lsl9hyntdz4gzyzukak4h5zjljjaazqae3gr7s802ucaswjal6k6x4jr6qa5cuddtz2rr3mp Due to GitHub breach, we released a feed for malicious VS Code extensions, auto-generated with IoCs out of Agent Mesh. I hope it&#39;s useful. If it is, let me know and we&#39;ll do this regularly, Can add in skills, MCP servers, etc.:<br/><br/><a href="https://www.knostic.ai/blog/agentic-threat-intelligence-feed-vs-code-extensions">https://www.knostic.ai/blog/agentic-threat-intelligence-feed-vs-code-extensions</a><br/><br/>Agent Mesh:<br/><a href="https://agentmesh.knostic.ai/">https://agentmesh.knostic.ai/</a><br/><br/>Let me know if useful.<br/><br/>—<br/>And if you’d like to secure your agents, do check us out:<br/><a href="https://knostic.ai/">https://knostic.ai/</a><br/><br/>Free for up to five users:<br/><a href="https://getkirin.com/">https://getkirin.com/</a> 2026-05-20T21:30:24Z https://njump.me/nevent1qqszmdjky4l0gmfy6g3cmtkc8ecf2h3sm7ytn9rwznn9qk0q2d0rlgszyzukak4h5zjljjaazqae3gr7s802ucaswjal6k6x4jr6qa5cuddtzmzjpwz In reply to <a href='/nevent1qqsqa2t256acwwwngsrtld4w92d7y8qsfagffyagqjj9737uk7thx6gaqry7v'>nevent1q…ry7v</a><br/>_________________________<br/><br/>thanks! 2026-05-02T20:22:01Z https://njump.me/nevent1qqsd9zgdul0vjqmcgasgp5xhqxx0gjeaar0pd4wvehc4cktdgerdj5szyzukak4h5zjljjaazqae3gr7s802ucaswjal6k6x4jr6qa5cuddtz0jpw8z My life with Claude Code<br/><br/>Via <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub17gu90ggcsk30cklck9utw5c68mc2f9v74457ep39pj7x8hs7jtvs03v7n3" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>David</span> (<span class="italic">npub17gu…v7n3</span>)</a></span> buchanan<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/258/127/615/074/925/original/bbbe76ccb7512a8c.png"> <br/> 2026-03-19T22:10:50Z https://njump.me/nevent1qqsrzpmr66c85f6dnphxs7vy83fmfyfjckttr4w86juh3lqlu3ctq7szyzukak4h5zjljjaazqae3gr7s802ucaswjal6k6x4jr6qa5cuddtzkr9ewg This is the most incredible thing I have heard this year (yet). A guy sequenced his dog&#39;s cancer DNA against her DNA, and used ChatGPT and AlphaFold to develop an individualized mRNA vaccine to save her life. The future is here. It took longer to get approval for the treatment than to develop it.<br/><br/>Story:<br/><a href="https://www.theaustralian.com.au/business/technology/tech-boss-uses-ai-and-chatgpt-to-create-cancer-vaccine-for-his-dying-dog/news-story/292a21bcbe93efa17810bfcfcdfadbf7">https://www.theaustralian.com.au/business/technology/tech-boss-uses-ai-and-chatgpt-to-create-cancer-vaccine-for-his-dying-dog/news-story/292a21bcbe93efa17810bfcfcdfadbf7</a> 2026-03-14T18:53:57Z https://njump.me/nevent1qqs0c4jzn4xemd8jkygx52ghes65gdcp798mejx25vwl86u7a7uarlqzyzukak4h5zjljjaazqae3gr7s802ucaswjal6k6x4jr6qa5cuddtz2p5u4x We’ve seen lots of great submissions to [un]prompted, the AI security practitioner conference, and it seems like everyone is using AI for log analytics, vibe coding internal tools, and AppSec advisors! <br/><br/>Bar for these talks is gonna be pretty high. What else you got?<br/><br/><a href="https://unpromptedcon.org/">https://unpromptedcon.org/</a><br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/932/151/391/772/923/original/578ce20b5c4fc835.png"> <br/> 2026-01-21T08:30:44Z https://njump.me/nevent1qqsvfnsay03mht62qhue4hp3q64lmypwnu20dqn864w6semjef4rmuczyzukak4h5zjljjaazqae3gr7s802ucaswjal6k6x4jr6qa5cuddtzt2mdhc Cursor’s new browser could be compromised via a simple JavaScript injection. <br/><br/>In this new research from Knostic, we demonstrate this attack via registering a local MCP server with malicious code, which in turn harvests credentials and sends them to a remote server.<br/><br/>Unlike VS Code, Cursor does not perform integrity checks on Cursor-specific features, and that difference makes Cursor’s runtime components a higher-risk target for tampering. <br/><br/>Download Kirin for free to protect your IDE against these attacks: <a href="https://app.getkirin.com/">https://app.getkirin.com/</a> <br/><br/>Learn more about the attack: <a href="https://www.knostic.ai/blog/mcp-hijacked-cursor-browser">https://www.knostic.ai/blog/mcp-hijacked-cursor-browser</a><br/><br/>Attacks on AI agents, and coding assistants specifically, expand the CI/CD boundaries, effectively extending the perimeter to the IDE and developer machines. This represents a fast-expanding supply chain risk for the enterprise.<br/><br/>While the attack itself is new, the underlying issues are not, and we’d like to tip our hat to others who walked this path before us, such as Johann Rehberger. <br/><br/>Credit to Dor Munis for the research. 2025-11-13T12:39:24Z