affected_products:"AI coding assistants" × limpar

Resultados

2 casos · pág. 1/1

tenable.com · há 8h low

Tenable guidance on shadow AI: MCP servers, agents and local models widen enterprise exposure

A Tenable blog post for Cybersecurity Awareness Month argues that shadow AI now covers far more than personal chatbots. It includes unvetted MCP servers, AI browser extensions, locally hosted models, coding assistants and autonomous agents holding broad credentials. Citing IBM's 2026 Cost of a Data Breach Report, it says 43% of organizati…

safedep.io · há 3d high

Hijacked AI coding assistant session recommends malicious PyPI package, seeding Shai-Hulud worm across ~100 internal repositories

In September 2026, researchers reported an attack that began inside a live AI coding assistant session at a software company. The attacker gained control of a developer's session, and the assistant recommended a PyPI package that looked normal. The developer installed it, and a hidden infostealer took source code, repository secrets and h…

TeamPCP technology software development