GitHub confirmed a security breach where 3,800 internal repositories were stolen via a poisoned VS Code extension. The threat group TeamPCP has claimed responsibility, highlighting critical vulnerabilities in the software supply chain.
Kenji··1 min read
A new research report finds that 380,000 publicly accessible assets built by non-technical employees, dubbed 'vibe-coded' apps, are creating a major shadow AI security crisis for enterprises.
Jason··2 min read
Cloud development platform Vercel has confirmed a data breach where attackers stole employee information, prompting concerns over platform security and regulatory compliance.
Jason··2 min read
Vercel has confirmed a data breach involving employee information being sold online, raising concerns about platform security and the company's legal obligations.
Jason··2 min read
Enterprises are facing critical security gaps as they deploy autonomous AI agents. Recent incidents at Meta and Mercor highlight a structural inability to manage agent permissions and isolate high-risk actions.
Jason··2 min read
The personal email account of FBI Director Kash Patel was breached by a pro-Iranian hacking group, Handala. The hackers claimed the breach was retaliation for Patel’s vow to pursue groups targeting the U.S. The DOJ has confirmed the breach and is investigating.
Kenji··2 min read