A hijacked AI coding session reportedly spread a worm across about 100 repositories
Daily Cyber News: A hijacked AI coding session reportedly spread a worm across about 100 repositories
A hijacked AI coding-assistant session reportedly helped an attacker spread malicious code across about 100 internal repositories at an unnamed software-as-a-service provider. According to Mandiant, the assistant first recommended software that the attacker had poisoned, and someone accepted that recommendation. The resulting Shai-Hulud activity then spread through the internal repositories and stole repository secrets and source code.
Key context: This incident shows how a connected coding agent can turn one compromised session into a much wider software supply-chain problem.
For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.
Topics: cybersecurity news, cybersecurity, cyber risk, hijacked, coding, session, reportedly, spread, worm, across.
