AMD RCE Ignored, GitHub Boosts Secret Scanning with LLMs, AUR Supply Chain Attack

AMD RCE Ignored, GitHub Boosts Secret Scanning with LLMs, AUR Supply Chain Attack

Today's Highlights

This week, a critical RCE vulnerability in AMD hardware went unpatched, highlighting vendor inaction, while GitHub significantly enhanced its secret scanning using LLM-driven verification to reduce false positives. Additionally, a widespread supply chain attack compromised hundreds of AUR packages with an infostealer, demanding immediate attention from Arch Linux users.

The RCE that AMD wouldn't fix (Hacker News)

Source: https://mrbruh.com/amd2/