GitSpawn Flaws Let Malicious Repositories Execute Code in Claude Code, Codex, Cursor, and Grok

02/09/2026

A newly disclosed class of vulnerabilities, dubbed GitSpawn, allows a booby-trapped repository to silently execute code on a developer's machine the moment it is opened with an AI coding agent, no prompt typed, no approval clicked, and in some cases before the user has even authenticated. Security researchers at Manifold Security found the flaw while investigating what CLI-based coding agents actually do on startup, as detailed in the technical disclosure published by Manifold Security.

Nearly every agent they examined gathers project context by quietly running git commands like git status or git diff in the background. That behavior is unremarkable on its own, but each of these commands triggers git to refresh its internal index, and that refresh is where the danger lies. Git supports a performance setting called core.

fsmonitor, which lets a repository specify a helper program that git runs automatically whenever the index refreshes. It is documented intended…

➪ Continue reading the full article on cybersecuritynews.com

How to Buy Refurbished Phones Safely in India?

Refurbished phones can be safe to buy in India when purchased from a manufacturer, known retailer, or reputable physical refurbisher. Before buying a refurbished phone, shoppers should check hardware features, warranty, and the seller's reliability. Here is a complete checklist that can help you choose and buy a refurbished phone in India. ➪ Continue reading the full article on www.gadgets360.com … [Read More...]

OpenAI Agents Hacked Another Website

Plus: Tens of millions of US and Canadian drivers' licenses go up for sale on the dark web, the US military finally tries to tackle the risk online ad data poses to troops, and more. ➪ Continue reading the full article on www.wired.com … [Read More...]

I compressed my Steam library instead of buying another SSD, and got 400GB back

With AAA titles taking up more than 100GB of storage space these days, even a 2TB SSD won't cut it unless you're okay with uninstalling and reinstalling games as you need them. For years, I never really had more than four or five games installed on my PC at any given time, so storage space wasn't something I was worried about. That changed after I installed three AAA games that took up about 150GB … [Read More...]

Microsoft Teams Desktop Client Fails to Load on Windows System – Microsoft Investigating

Microsoft is investigating an ongoing issue causing some Windows users to face significant delays or outright failures when launching the Microsoft Teams desktop client. The company acknowledged the problem, tracked internally as TM1466820, and confirmed it remains unresolved as engineers continue digging through service logs to find a root cause. According to Microsoft's incident notice, affected … [Read More...]

iPhone 18 Pro Roundup: Expected Price, Launch Date, Specifications, Features and More

The iPhone 18 Pro is expected to bring several internal upgrades while retaining much of the iPhone 17 Pro's design. Rumours point to a 2nm A20 Pro chip, a new C2 modem, LTPO+ display technology and a larger battery. Apple could also introduce a variable-aperture main camera and a smaller Dynamic Island. The phone may arrive in four colours, including a new Dark Cherry shade. Pricing could rise … [Read More...]

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

A group of AI safety researchers says a fleet of autonomous agents that identified themselves as OpenAI systems left about 18,000 posts on a dormant 25-year-old German wiki between May and July 2026, using the site as a shared board to pool answers to a timed web task and pass around a way out of their sandbox. The activity was concentrated on DSEwiki, a German software developer wiki that … [Read More...]

AI Agents Breach Company Network in Under 10 Hours and Steal Root Credentials

A human attacker armed with frontier artificial intelligence models breached an enterprise network and seized root credentials in under 10 hours, a timeline that would normally take human red teams roughly two weeks to complete, according to a new incident response report from Palo Alto Networks' Unit 42. The threat actor told Unit 42 investigators during ransom negotiations that they relied on … [Read More...]

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in attacks targeting the education sector in the U.S. and Europe. The Arctic Wolf Adversary Research Team said it observed attackers exploiting CVE-2026-81578 and CVE-2026-82078 – an authentication bypass and remote code execution chain – to conduct command execution and reconnaissance, as well as ➪ … [Read More...]

iPhone 18 Pro Max Roundup: Launch Date, Expected Price in India, Features, Specifications and More

Apple is set to host its major hardware event next month where it is expected to unveil the next-generation iPhone models, ubiquitously known as the iPhone 18 series. While the focus of the rumour mill has been the tech giant's first foldable iPhone, the iPhone 18 Pro Max, which is expected to sit atop the non-foldable lineup, is likely to carry major upgrades as well. A more powerful chipset, … [Read More...]

From Steve Jobs to John Ternus: Apple’s CEOs and How They Shaped the Company

John Ternus took over as the new CEO of Apple on September 1. Ternus took over the company's reins from Tim Cook, the longest-serving CEO of Apple, who remained in the position for 15 years. In 1977, Michael Scott became the first CEO of Apple, a company which was going to be a multi trillion dollar giant in the coming decades. Following Scott, Mike Markkula took over the CEO responsibilities, … [Read More...]