Researchers Find New GhostApproval Bug in Many AI Coding Assistants
The bug is a modern twist on a Clinton-era piece of known Unix badness: following symbolic links.
All topics
The bug is a modern twist on a Clinton-era piece of known Unix badness: following symbolic links.
Jack Cable, co-founder and CEO of Corridor and a former senior technical advisor at CISA, discusses AI’s impact on cybersecurity, vulnerability discovery, and coding practices.
The investigation into UAT-7810 shows significant evolution in their toolkit, specifically the development of a successor to their previously documented SHORTLEASH backdoor.
It’s a pre-July 4th extravaganza! To celebrate, we dive into a little cybersecurity history with a story about the MySpace Samy worm, then we jumpe into the news of the week, including an update on the Fable 5 export control drama, and the emergence of the ARToken operator panel. Links ARTokens story: https://decipher.sc/2026/06/26/new-turla-stockstay-backdoor-emerges/ Scattered Spider […]
19-year-old Peter Stokes is one of several to be arrested for their alleged participation in Scattered Spider.
This new ARToken operator panel has a clear lineage going back to the EvilTokens framework, which emerged in early 2026.