A massive code leak tied to Anthropic raises critical questions about AI platform security, repository exposure, and development pipeline risks. This briefing breaks down what happened, the potential impact to AI systems, and the security actions organizations should take to reduce exposure and defend against follow-on attacks.
Malicious browser extensions were reported stealing ChatGPT and DeepSeek chats, while new research explored data adulteration to reduce the value of stolen AI knowledge graphs. Adjacent risks include extension marketplace supply chain exposure in AI-powered IDEs and continued emphasis on resilience as attacker speed increases.
OpenAI acknowledges its next-generation models may reach zero-day and intrusion-level capabilities, NIST moves to define a threat and mitigation taxonomy for AI agents, Tenable shows how a simple prompt injection against Microsoft Copilot Studio led to data leakage and fraud, and the Cloud Security Alliance publishes detailed guidance on AI prompt guardrails for enterprise GenAI.
Over the last 72 hours, AI security stories have centered on shadow AI forcing a rethink of governance, “IDEsaster” flaws in AI coding tools enabling data theft and RCE, FBI warnings about AI-generated virtual kidnapping scams, NATO’s use of an AI chatbot in large-scale cyber war games, and new evidence that AI image services and AI bots are reshaping data-leak and scraping risk.
Small AI habits lead to big data exposure. Discover the everyday mistakes users make and the simple changes that protect your privacy.
AI plugins are powerful, and risky. Learn how to control permissions, monitor data flows, and prevent cross-system data leakage.
AI meeting assistants are helpful, but meetings often contain your most sensitive data. Learn how to use AI for intelligence without leaking critical information.
Your prompts hold power and risk. Learn how to handle sensitive data safely when using AI tools so nothing confidential leaks into the model.
Attackers can clone ML models or extract memorized data through API queries. This playbook details mechanisms, real-world research, and defenses such as output minimization, DP, and active monitoring.
AI is reshaping ransomware by enabling precision targeting, stealthy spreading, and adaptive negotiations. This playbook shows how the attacks work and offers tool-backed strategies to defend and recover.