OpenAI Codex CLI Vulnerability: Command Injection

By: Isabel Mill & Oded Vanunu OpenAI Codex CLI is OpenAI’s command-line tool that brings AI model-backed reasoning into developer workflows. It can read, edit, and run code directly from the terminal, making it possible to interact with projects using natural language commands, automate tasks, and streamline day-to-day development One of its key features is…

Read More

1st December – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 1st December, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES OpenAI has experienced a data breach resulting from a compromise at third-party analytics provider Mixpanel, which exposed limited information of some ChatGPT API clients. The leaked data includes names, email addresses, approximate…

Read More

Metasploit Wrap-Up

This week, we have added 10 new modules to Metasploit Framework including an SMB to MSSQL relay module, a remote code execution module targeting Fortinet software, additional 32-bit and 64-bit RISC-V payloads, and more. The SMB to MSSQL NTLM relay module allows users to open MSSQL sessions and run arbitrary queries against a target upon…

Read More

what you need to know

Getty Images The UK’s National Screening Committee has recommended that only a very small group of men at high risk of prostate cancer should be screened for the disease. There is currently no screening programme for prostate cancer, the most common cancer in men. But there has been some energetic campaigning for change by high-profile…

Read More