Researchers managed to steal GitHub OAuth tokens by abusing a command injection vulnerability.

Command injection in Codex and a hidden outbound channel in ChatGPT exposed risks of credential theft and covert data ...

Spam and several of the most common vulnerabilities are on the decline, according to a report issued this week, but there has been a marked increase in new types of attacks, such as shell command ...