Security Vulnerabilities

GitHub today launched a new "Code Scanning" feature (preview) for all Advanced Security (GHAS) licensed users to search for potential security vulnerabilities and coding errors in GitHub code. This new feature uses Copilot and CodeQL (CodeQL is a code analysis engine developed by GitHub to automatically perform security checks) to discover possible vulnerabilities or errors in your code, classify them, and prioritize repairs. It is worth mentioning that "Code Scanning"…

The popular chatbot ChatGPT has recently been caught up in a security crisis again, and was exposed to leaking private conversations between users and the robot, including sensitive information such as usernames and passwords. The ArsTechnica website quoted screenshots provided by its readers and reported that ChatGPT leaked multiple conversations that were not from the user himself, including a large amount of sensitive information. The reader originally used ChatGPT to conduct an unrelated query, but unexpectedly found that the chat records contained conversations that did not belong to him. These leaked conversations involved multiple aspects. One group of conversations…