Researchers found 15 malicious JetBrains plugins posing as AI coding tools that exfiltrate OpenAI, DeepSeek, and SiliconFlow ...
At least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers. The campaign, discovered by Aikido Security, includes plugins that act as AI coding ...
Aikido Security found at least 15 integrated development environment (IDE) plugins on the JetBrains Marketplace which had ...
SearchLeak and a three-CVE LiteLLM chain broke the same AI trust boundary in two weeks. A 5-check audit maps each gap to a ...
Security researchers identified a coordinated malware campaign within the JetBrains Marketplace designed to exfiltrate ...
At least 15 plug-ins for JetBrains IDEs transmit API keys to an external server, while otherwise offering their promised ...
Nightfall AI today published findings from its annual State of Secrets Report. This research revealed that secrets like passwords and API keys were most often found in GitHub, with nearly 350 total ...
A researcher claims an AI-assisted pipeline helped earn $500,000 in Google bug bounty payouts, raising API security and ...
Copilot-enabled repos are 40% more likely to contain API keys, passwords, or tokens — just one of several issues security leaders must address as AI-generated code proliferates. AI coding assistants ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results