Rust maintainers targeted by phishing through fake job calls
The Rust project warns of an ongoing campaign against maintainers of popular crates. The target is the publish token, not the laptop.
Serguey Asael Shinder
Contributing writer
Software engineer, BSc First Class Honours in Computing and Information Systems. Writes about the JVM, build tooling and the parts of a release note that actually change behaviour.
Signed pieces
pgAdmin 9.18 fixes four CVEs, including an auth bypass
pgAdmin 4 v9.18 closes an authentication bypass and two connection-string injections that redirect the connection, and the exported password, to a host of the caller's choosing.
OpenAI publishes a misalignment disclosure framework and six reports
A process for tracking, investigating and disclosing model behaviour, plus six cases observed over the last six months.