Skip to content

Search results for «Data Exposure» Page 5

  1. Aoki Infostealer Targets AI Coding Assistants for Credential Theft

    Symantec identified expanded Aoki infostealer variants that harvest credentials from AI coding assistants, enabling LLMjacking and unauthorized access to linked services.

    3 min read

  2. OpenCode Security Review: API Key Exposure and User Protections

    The October 2026 incident exposed third-party AI API keys for a small subset of OpenCode Console users. Affected users received direct notices and should rotate keys immediately.

    3 min read

  3. AI Marketing Tools Security Review: Singapore Breach Exposes 95,000 Emails

    A Singapore retailer exposed 95,364 customer emails after an employee used generative AI to create a bulk-mail script that placed addresses in the visible To field.

    3 min read

  4. ConnectWise Security Review: Supply-Chain Incident Impact on Microsoft 365 Tenants

    The October 2026 compromise of ConnectWise Cloud Backup credentials allowed unauthorized access to 162–173 Microsoft 365 tenants. This review details the timeline, permissions abused, and recommended actions.

    3 min read

  5. Brevo Security Review: Lessons from SSO and Supply-Chain Incidents

    Two September 2026 incidents exposed authorization gaps in Brevo’s SSO and a hardcoded Cloudflare credential. The platform restored service quickly, yet the events underscore script and credential risks for email marketing users.

    3 min read

  6. AI Tools Security Review Shows Critical Observability Gaps in Public AI Agents

    The Partnership on AI report identifies six telemetry gaps that limit monitoring of publicly available AI agents and increase risks during scaling.

    3 min read

  7. Cryptocurrency Wallets Security Review: OkoBot Malware Framework Analysis

    Kaspersky identified the OkoBot framework in January 2026 as a modular tool stealing cryptocurrency wallet data across 25 countries through ClickFix tactics and fake GitHub repositories.

    3 min read

  8. AI Tools Security Review Shows Malware Campaigns Targeting Claude and ChatGPT Users

    Analyses from April to October 2026 recorded over 1,200 sandbox submissions tied to fake AI tool campaigns, with Claude and ChatGPT lures dominating.

    3 min read

  9. Vercel Sandbox security review: Isolation limits for AI-generated code

    A detailed look at the isolation mechanisms, reported vulnerabilities, and remaining risks when running untrusted code in Vercel Sandbox microVMs.

    3 min read