'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit, ...
GitHub

Skill-native RTK token optimization for OpenCode, Claude Code, Codex, Antigravity, and AGENTS.md-compatible coding agents.

OpenCode RTK Skill is a production-grade Agent Skill that makes coding agents prefer rtk command wrappers so terminal output stays compact, useful, and token-efficient. Supports: OpenCode, Claude Code ...
Bleeping Computer

GhostTree Attack Abused Recursive Windows Junctions to Hide Malware

Most security teams think of NTFS junctions and symbolic links as niche file system features. They let one directory point to another, like a shortcut that the OS treats as real. They exist for ...
GitHub

Fast JSON encoder/decoder compatible with encoding/json for Go

We are accepting requests for features that will be implemented between v0.9.0 and v.1.0.0. If you have the API you need, please submit your issue here. go-json-fuzz is the repository for fuzzing ...
IEEE

Toward Automatic Heap Exploit Generation by Using Heap Layout Constraints on Binary Programs

Abstract: Automatic exploit generation (AEG) is widely recognized as one of the most effective methods for assessing the risk level of vulnerabilities. To exploit heap-related vulnerabilities, it is ...
IEEE

Neural-Network-Based Recursive State Estimation for Nonlinear Networked Systems With Binary-Encoding Mechanisms

Abstract: This work addresses the problem of recursive state estimation for networked control systems with unknown nonlinearities and binary-encoding mechanisms (BEMs). To enhance transmission ...