7:19 10 chapters
Daily Digest - June 28, 2026
Mozilla shows AI coding agents can be tricked into running malware from a clean GitHub repo, fetchmail and n8n scramble to patch nasty bugs, a self-erasing backdoor feeds the ransomware economy, and China tops the supercomputer list without a single GPU.
Chapters
-
Intro
-
Clean repos, hijacked coding agents
https://www.bleepingcomputer.com/news/security/clean-github-repo-tricks-ai-coding-agents-into-running-malware/ -
Fetchmail patches an NTLM overflow
https://seclists.org/oss-sec/2026/q2/1047 -
n8n's SSRF fix ships off by default
https://seclists.org/oss-sec/2026/q2/1046 -
A self-erasing backdoor for hire
https://www.bleepingcomputer.com/news/security/stealthy-mistic-backdoor-linked-to-ransomware-access-broker-kongtuke/ -
Routing prompts without asking a model
https://github.com/itsthelore/wayfinder-router -
Apple's Vision Pro chief heads to OpenAI
https://techcrunch.com/2026/06/27/apple-vision-pro-exec-is-reportedly-leaving-for-openai/ -
Apple lobbies for blacklisted Chinese memory
https://fortune.com/2026/06/27/apple-us-approval-chips-blacklisted-cxmt-price-hikes-mac-memory-shortage/ -
China tops the supercomputer list, no GPUs
https://www.cnn.com/2026/06/24/tech/china-tops-world-supercomputer-ranking-intl-hnk -
Sign-off
Also on Spotify: spotify:episode:2yyaHZWV3hXb1xRo2Tiz2l