A simple typo of ghcr.io to ghrc.io would normally be a small goof. You’d typically get a 404 or similar error, finally work out the issue, fix it, and move along. But in this case, that typo appears to be doing something very malicious, stealing GitHub credentials. What’s ghcr.io? First, a quick bit of background. ghcr.io is an OCI conformant registry for container images and OCI artifacts used by a lot of projects. It’s part of GitHub and is a very popular image and artifact repositor...| Brandon Mitchell
Uh oh that's a bad rule!| Detection Engineering Weekly
Yall are tiring me just from all the posts and drunk texts| www.detectionengineering.net
The attack we developed shows that traditional Web security assumptions don't hold for agentic AI, and that we need new security and privacy architectures for agentic browsing.| Brave’s latest news on Brave
Good rules vs Bad rules| Detection Engineering Weekly