Wer mit KI-Coding-Agenten arbeitet, kann Zugangsdaten in öffentliche Repositories ausleiten. Schuld ist eine Komfortfunktion.

Grok Build Coding Agent Leaks Confidential User Data

Claude Code secrets exposure affected 1,994 GitHub repositories. Learn how approval settings leaked credentials and what security teams should do next.

A massive DHS data leak exposed records of over 41,000 employees, revealing links to undercover ICE operations, Palantir tools and AI platforms.

Hardwarehändler Mindfactory ist Opfer eines Cyberangriffs geworden. Kunden und die Datenschutzbehörde wurden informiert, die Ermittlungen laufen.

Grok Build, the vibe-coding agent from SpaceXSI, is leaking data—some of it proprietary business information and other sensitive secrets—from thousands of its users, including the very same Elon...

Die TUM hat ihr zentrales Campus-Management-System offline genommen, nachdem sich Angreifer unberechtigten Zugriff verschafft und Daten entwendet haben.

According to Rosstat data obtained by hackers, as of the end of August, Russia had lost at least 412,576 soldiers in the war with Ukraine. This figure does not include those missing in action or foreign mercenaries. The leaked data was published on the RosstatLeaks portal. The website of Russia’s Federal State Statistics Service (Rosstat) was hacked on the night of Saturday, November 1. The hacker groups Cyberpartisans and Silent Crow claimed responsibility for the attack. As a result of the attack, the hackers gained access to a significant portion of the agency’s IT infrastructure, including its central office and regional branches. According to the hackers, they gained control of approximately 25,000 computers. One of Rosstat’s database directories that the hackers accessed. Photo credits: Silent Crow In particular, the hackers breached Rosstat’s electronic document management system and databases, which contain statistical, economic, and personal information, as well as census data. It is reported that during their time within Rosstat’s infrastructure, the attackers obtained approximately 23 terabytes of information, including details about Russian military casualties in the war against Ukraine. According to the project authors’ calculations, 440,982 death records were extracted from Rosstat’s medical records database, which they link to the...

Aalbæk Badehotels dataleverandør blev lørdag udsat for en sikkerhedsbrist, der betyder, at en uautoriseret tredjepart har fået adgang til personoplysninger om de gæster, der har boet, eller som har en reservation på hotellet. Det fortæller indehaver Ulla Mosich. - Vi fik opringninger i går over middag fra gæst...

Hotel guests at several Danish hotels have received fake WhatsApp messages asking for their payment card details after a data leak at a reservation software provider, DR reports. Hotel Koldingfjord said in a Facebook post that it does not use WhatsApp to communicate with guests, and that the mess…

Independent researcher Sammy Azdoufal reported that Energize Lab's Eilik and Eiliko AI companion robots send speech to Beijing cloud servers where millions of conversations were stored readable (about 8.3M per Cybernews; other outlets report about 13M), along with household profiles of which…

 Italy’s Foreign Minister Antonio Tajani has said that cybercriminals circulated his personal data on the dark web, exposing him and his family to threats and intimidation. Prime Minister Giorgia Meloni blamed pro-Russian hackers, although Tajani did not publicly identify the attackers. The episode highlights how digital harassment and data leaks can be used to pressure political leaders.  Tajani, who is also Italy’s deputy prime minister, announced the breach in a social-media post. He said that for days, cybercriminals had been spreading information about him on the dark web while trying to obtain additional details about him and his relatives. He said the criminals were even prepared to pay for further personal information, creating what he described as new threats and intimidation for his family.  The foreign minister did not specify exactly what data had been leaked or which group carried out the attack. However, he linked the targeting to Italy’s position on Ukraine, saying that defending a sovereign state’s freedom and supporting democracy and independence had made him a target. He also said the attack appeared to be a reaction to measures Italy had taken to strengthen cybersecurity at its foreign ministry.  Meloni expressed full solidarity with Tajani and described the alleged sale of confidential information about government officials as a matter of grave concern. She said it must be addressed with the utmost determination, framing the incident as an attack not only on an individual minister but on Italy’s institutions. Her statement came amid wider concern across Europe about cyberattacks, sabotage, drone incidents, and other hybrid threats.  Tajani rejected the intimidation and vowed to continue his work. “I will not allow myself to be intimidated in any way,” he said, adding that he would keep defending his ministry and Italy while strengthening cooperation with partners to improve collective security. Italy remains a supporter of Ukraine, providing humanitarian and military assistance as the country continues to defend itself against Russia’s invasion.  The incident follows a series of security disruptions across Europe, including hoax bomb threats that caused flight diversions, threats against broadcasters, attacks on supermarket refrigeration systems, and drone incursions. Authorities have not publicly attributed those threats to a particular group or state, and no evidence has emerged directly linking the hoaxes to a government. Still, the alleged leak of Tajani’s data has intensified concerns that political figures and critical institutions are increasingly vulnerable to online intimidation campaigns.