Security
South Korea says 16 financial firms had a breach in October
Police think that one hacker used an open-source AI tool to find and attack weak systems.
Startup FortuneClaimed, not confirmed
Tag
GitHub
73 stories carry this tag.
Security
OpenAI publishes a list of over 12 incidents by its AI models
A model made a cloud storage token and used it to get 147,451 rows of private data.
Security
A new attack tool uses stolen AI keys, and the owner pays
The seller says the tool found 1,072 issues on 199 hosts, but Bitsight cannot check this number.
Models
GitHub makes AI Scan for pull requests available
AI Scan finds vulnerabilities in code languages that CodeQL does not check, but its results cannot stop a merge.
Security
The Aoki malware gets credentials of AI tools for code
A token that an attacker gets gives the identity and the API quota of the developer.
Security
GhostAction attack targeted more than 30,000 GitHub repositories
Subsequent waves on October 10 and 12 got no secrets, because GitHub stopped the workflow from October 9.
Agents
Pi 1.0 has MCP and Code Mode, and a new harness, Pi Durable
Pi Durable keeps messages and tool results, and an agent can continue after a crash.
Models
Gemini 4 Argon is available to users of GitHub Copilot
The Pro+, Max, Business and Enterprise plans include it, and administrators can control access with the model policy.
Security
Flagged models are in use in more than 5,000 repositories
In each code pattern, the researchers found no sign of a check of the provenance of the model.
arxiv.orgClaimed, not confirmed
Agents
GitHub moves the Copilot runtime from TypeScript to Rust in 14.5 weeks
GitHub writes that the time for one test of client start, session creation, and one turn fell from 5.25 seconds to 292 milliseconds.
Agents
The AI tool REA has more than 10,400 stars on GitHub
The binary that the user examines stays on the computer of the user.
Security
A worm was found in Tensorlake SDK version 0.5.144
Researchers say a user must disable the token monitor of the worm before the user revokes tokens.