Tag: #security-breach21 results
Meta has suffered an internal data exposure linked to its controversial employee-tracking initiative. The program, which monitors keystroke data to train AI models, has faced significant pushback from staff regarding privacy concerns.
OpenAI reported a supply chain attack that compromised two employee devices and potentially leaked code-signing certificates. While no customer data was affected, users are urged to update their macOS application by June 12.
An open-source package called element-data, with 1 million monthly downloads, has been caught stealing user credentials. Millions of users are advised to immediately check their systems for signs of compromise.
Vercel's CEO suspects AI aided hackers in a rapid breach using OAuth abuse and a stolen employee account. Attackers showed deep knowledge of the company's infrastructure with surprising velocity. Stolen data is being sold on the dark web for $2M.
Cloud deployment firm Vercel has been breached and is advising users to rotate secrets. The compromise is blamed on a small, third-party AI tool, as per the updated report.
Meta suffered a historic Sev1 security incident last week. For two hours, sensitive data of hundreds of millions of users and internal confidential files were exposed to thousands of unauthorized employees. The breach struck at the heart of Meta's core infrastructure.
Context AI, an AI agent training startup, disclosed a major security incident last week. TechCrunch confirmed Delve, a troubled compliance firm, handled their security certifications. This marks another issue for Delve's customers.
Lovable, $6.6B vibe coding platform with 8M users, suffered three security incidents exposing source code, DB credentials, and user records. Latest BOLA vulnerability remained open for 48 days after closing a bug bounty report. Incidents highlight worsening security in vibe coding.
Ben's Bites reports a series of successive security breaches targeting AI agents. It emphasizes the need to isolate agent permissions to prevent exploitation. Practitioners are advised to implement sandboxing immediately.
Japanese logistics firm Sagawa Express confirmed a data breach affecting 70,000 users of its 'Smart Club' platform. The leak was caused by a system error during maintenance, exposing names, email addresses, and tracking numbers.