#secrets
2 articles
Beware: GhostCommit Hides Prompt Injection in PNGs to Drain Your .env
A new supply-chain attack smuggles prompt-injection instructions inside image files so coding agents exfiltrate .env secrets right…
Your Cron Jobs Were Leaking Secrets — Hermes Just Fixed the Security Hole
Hermes cron jobs were running under the wrong secret scope. A fix ensures every scheduled task uses the correct profile credential…