August 17, 2026
- Snowflake GitHub Actions workflow injection. Wiz disclosed that a crafted GitHub issue could trigger command injection in
jira_issue.ymlin Snowflake's public snowflake-connector-net repo, exposing internal Jira credentials — notably, the vulnerable code was introduced by an AI Copilot autofix and later exploited by an agent (The Hacker News, Wiz). · Cloud & Identity
in One Video Call to Kernel: Unisoc Baseband Chain Gives Full Android Takeover