Microsoft’s open source tools were hacked to steal passwords of AI developers


Microsoft has cut off access to dozens of its open source projects hosted on GitHub as it investigates how hackers apparently breached the projects and injected password-stealing malware into the code.

Many of the affected projects relate to Microsoft’s cloud service Azure and other tools used by developers to code with AI development apps, such as Claude Code, Gemini’s command line interface, and VS Code.

Read more…
Source:  TechCrunch News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • The Unseen Layers: Exploring The Tactics Of Multistage .NET Malware Packers

    November 27, 2023

    Recently, the SonicWall Capture Labs Threat Research team has identified a new .NET Packer that is currently being widely used by the various stealers such as Lokibot, AgentTesla etc. In the ever-evolving landscape of cybersecurity threats, malicious actors continue to develop sophisticated techniques to compromise systems and exploit vulnerabilities. One such method gaining prominence is the ...

  • Ransomware ‘catastrophe’ at Fidelity National Financial causes panic with homeowners and buyers

    November 27, 2023

    Last Tuesday, Fidelity National Financial, or FNF, a real estate services company that bills itself as the “leading provider of title insurance and escrow services, and North America’s largest title insurance company,” announced that it had experienced a cyberattack. Since then, homeowners who have mortgages and prospective buyers who are purchasing properties with FNF or one ...

  • Gulf Air hit with data breach, customer data possibly affected

    November 27, 2023

    Gulf Air, the national air carrier for the Kingdom of Bahrain, has confirmed suffering a data breach which most likely resulted in hackers stealing sensitive customer information. The company confirmed the news via a press release shared with local media highlighting a “data breach incident” on November 24, possibly resulting in the compromise of “some information ...

  • New Jersey: Montclair, Westwood Hospitals Divert Ambulances After Cyber Attack

    November 27, 2023

    Two hospitals in North Jersey are diverting ambulances from their emergency rooms after a cyber attack, authorities confirmed Monday. The attack impacted the computer systems at Mountainside Medical Center in Montclair, and Pascack Valley Medical Center in Westwood. Read more… Source: MSN News  

  • The Dark Side of AI: Large-Scale Scam Campaigns Made Possible by Generative AI

    November 27, 2023

    Generative artificial intelligence technologies such as OpenAI’s ChatGPT and DALL-E have created a great deal of disruption across much of our digital lives. Creating credible text, images and even audio, these AI tools can be used for both good and ill. That includes their application in the cybersecurity space. Read more… Source: Sophos  

  • Thousands of house purchases frozen by cyber attack

    November 25, 2023

    Thousands of home moves have been thrown into limbo following a cyber attack on an IT company used by property conveyancers. An outage at CTS has hit around 80 law firms, halting a series of property exchanges and completions across the country since Wednesday. Rob Hailstone, chief executive of Bold Legal Group, which runs a forum ...