/
affected_products:Codex × limpar

Resultados

3 casos · pág. 1/1

safedep.io · low

SafeDep tests Jev and Gryph to flag malicious actions by compromised AI coding agents such as Claude Code

A SafeDep researcher describes an experiment that uses Gryph (an audit trail for AI coding agents) and TypeSafe AI's Jev model to separate a developer's normal agent activity from attacks. The article cites threats to agents such as Claude Code and Codex: the Mini Shai-Hulud worm commits Claude Code hooks into repositories, malicious npm …

hacktron.ai · high

Hacktron chains libheif RCE in Discourse with OpenAI SSO flaw to take over OpenAI employee ChatGPT/Codex accounts

On July 25, 2026, Hacktron researchers chained a heap buffer overflow in libheif (reached through ImageMagick in Discourse's image-upload pipeline) with an OpenAI SSO weakness. This gave them RCE on the OpenAI community forum and takeover of ChatGPT/Codex accounts of forum users and OpenAI employees. To prove impact without reading sensit…