‘GhostApproval’ technique leads AI coding tools to alter files outside of sandbox

Laura FrenchJuly 9, 2026

The technique abuses symlinks to escape the intended workspace and weaken human-in-the-loop protections.

RESOURCES

Identity
How to Build an AI Governance Framework for Identity
Identity
How to Evaluate and Select Identity and Access Management Tools
Identity
Identity-based attacks: how they work and how to defend against them
Identity
Seeing the unseen: Closing AI identity blind spots
Vulnerability Management
The context gap: Building trusted agents in the age of AI-accelerated exploitation

PODCASTS

Leadership
Why AI Just Broke Traditional IT Security as Leaders Clash Over AI’s Value and Hiring – Matt Quinn – BSW #455
Vulnerability Management
Dune References, FAT, Claude, ZhiPu, PolinRider, RentaBot, Sony, Aaran Leyland & More – SWN #596
Application security
Defense-in-depth strategies for securing mobile applications – Ryan Lloyd – ASW #390
AI/ML
Mastering agent permissions and Identiverse interviews – Amir Ofek, Howard Ting, Ajay Gupta, Sandy Bird – ESW #466
Vulnerability Management
Beyond the AI Hype, Cyber Readiness in the Age of AI – Gibb Witham – SWN #595

FEATURED

Perspectives Spotlight: Expert Insights

Perspectives Spotlight: Expert Insights

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Perspectives

In Brief

More Resources

Vulnerability Management

CISA adds ColdFusion, Langflow, and Joomla bugs to known exploited vulnerabilities list

Steve ZurierJuly 8, 2026

Three of the four flaws added to CISA's KEV list were critical.

Rep. Josh Harder

Critical Infrastructure Security

Rep. Josh Harder: US must build more housing, infrastructure

SC StaffJuly 8, 2026

At ICIT event, California congressman urges faster housing, infrastructure to cut costs.

(Credit: Photo Agency – stock.adobe.com)

‘GitLost’ prompt injection leaks private repos via GitHub Agentic Workflows

Laura FrenchJuly 8, 2026

An issue opened on a public repository can lead the agent to disclose private details.

Holographic visualization of a multi-cloud environment showcasing hybrid cloud solutions

Linux bug dormant for 16 years can cause a VM escape

Steve ZurierJuly 7, 2026

A single compromised hypervisor can grant root privileges over the server.

Malicious websites trick AI agents into crypto payments, context poisoning

Laura FrenchJuly 7, 2026

Indirect prompt injections hidden in HTML were discovered on sites targeting developers and cryptocurrency owners.

Computer keyboard, close-up button of the flag of North Korea.

North Korean PolinRider supply chain attack targets 108 unique repos

Steve ZurierJuly 6, 2026

Socket says the campaign remains active and more attacks are likely.

1st ‘agentic ransomware’ JADEPUFFER invades database at machine speed

Laura FrenchJuly 2, 2026

The LLM fixed a failed login attempt within 31 seconds, demonstrating real-time adaptability.

System hacking with info message. Background with a code on a blue background and a virus warning. Cyber security and cybercrime

Vulnerability Management

CISA adds SharePoint flaw to known exploited vulnerabilities list

Steve ZurierJuly 2, 2026

SharePoint offers bad actors a roadmap into how an organization operates.

Events