Incidents tagged tech

Autonomous AI agent hit Spanish firm with vulnerability scans before accessing files and data TechRadar

Evidence indicates that GitHub is affected by remote code execution. Reported affected versions include < 1.83.11.

Security researcher Ari Marzouk disclosed "IDEsaster," a collection of over 30 vulnerabilities, with 24 assigned CVEs, affecting various AI-powered Integrated Development Environments (IDEs) like GitHub Copilot and Cursor. These flaws enable attackers to chain prompt injection techniques with legitimate IDE features and auto-approved AI agent tool calls to achieve sensitive data exfiltration and remote code execution (RCE).

The article highlights critical security risks in AI and LLM deployments, specifically prompt injection and jailbreak attacks, which enable manipulation for unauthorized actions, sensitive data exposure, and compliance failures. These rapid exploits, alongside data leakage and model theft, pose significant financial and reputational impacts on enterprises leveraging AI technologies.