#code-injection

[cyber-sec]

GitHub Workflow Bug Lets Attackers Run Code on Microsoft Repositories

A flaw in a GitHub Actions workflow in Microsoft’s Windows-driver-samples repo allowed attackers to inject Python code and execute it remotely, risking exposure of sensitive CI/CD secrets.

Source: Tenable

Read more: CyberSecBrief

[cyber-sec]

CISA Lists Actively Exploited Langflow Vulnerability

CVE-2026-33017, a Langflow code injection flaw, was added to CISA’s Known Exploited Vulnerabilities Catalog following evidence of active exploitation affecting AI workflows in federal and enterprise systems.

Source: Cybersecurity and Infrastructure Security Agency

Read more: CyberSecBrief

[baturgha]

Java is fantastic!

Java is a neat language. Universities use it to teach their fresh n00bs programming. But that doesn’t mean you can’t use it outside education: It has all the features one would ever want. Even code-injection comes as a feature. When you learn Java, you learn for life :-)