Skip to content

Developments

Company announcements and posts from the past 30 days.

For step-security/dev-machine-guard All projects

More filters
Reset

12 updates · By announcement or publication date

ProjectUpdateDate
step-security/dev-machine-guardCVE-2026-123158 (*sshole): OpenSSH Password Authentication Bypass on Alpine Linux ↗Company post · stepsecurity.ioPublished
step-security/dev-machine-guardCVE-2026-109518: apt Flaw Lets Attackers Swap Packages After Verification and Run Code as Root ↗Company post · stepsecurity.ioPublished
step-security/dev-machine-guardMalicious Files: Find What Supply Chain Attacks Leave Behind in Your GitHub Repositories and on Developer Machines ↗Company post · stepsecurity.ioPublished
step-security/dev-machine-guardBinance’s $6.34 Billion Hack: Developer Machines, AI Tooling, and Wallet Signing ↗Company post · stepsecurity.ioPublished
step-security/dev-machine-guardTrojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines ↗Company post · stepsecurity.ioPublished
step-security/dev-machine-guardGitHub Actions Native Egress Firewall vs. Harden-Runner: Five Differences That Matter ↗Company post · stepsecurity.ioPublished
step-security/dev-machine-guardStepSecurity Now Inventories AI Agent Plugins in Your GitHub Repositories and on Developer Machines ↗Company post · stepsecurity.ioPublished
step-security/dev-machine-guardlitellm 1.107.0 Compromised on PyPI and Docker: Credential Stealer and Hourly Remote Code Loader ↗Company post · stepsecurity.ioPublished
step-security/dev-machine-guardOVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found ↗Product · stepsecurity.ioPublished
step-security/dev-machine-guardeMudhra / emSign CA Compromise: What Python, pip, and CI/CD Users Need to Update ↗Company post · stepsecurity.ioPublished
step-security/dev-machine-guardOpenCode Security Breach: Distillation Attack Hit Console Users With Linked AI Providers. How to Find OpenCode on Developer Machines and Respond ↗Company post · stepsecurity.ioPublished
step-security/dev-machine-guardGhostAction Returns: Malicious “Security Audit” Workflows Now Mine Credentials from Entire Git Histories ↗Company post · stepsecurity.ioPublished
About this feed

Dates use the announcement date when known, otherwise the source publication date. Company posts come from official sources. Other reporting is reviewed for a company match. Coverage depends on accessible public sources.