Loading story…
Organizations are facing escalating security exposure from employee and developer use of public AI services without adequate controls. A viral social-media trend prompting ChatGPT to “create a caricature of me and my job based on everything you know about me” is being cited as a visible indicator of shadow AI and potential data leakage, because users may be sharing work context and sensitive details into non-sanctioned LLM accounts and then posting outputs publicly. The public sharing can also aid social engineering by revealing roles, access, and other targeting cues; if an attacker compromises an employee’s LLM account, they may be able to review prompt history for sensitive information.
Separately, Cyble Research and Intelligence Labs (CRIL) reported widespread credential mismanagement involving OpenAI/ChatGPT API keys, identifying 5,000+ public GitHub repositories with hardcoded credentials and roughly 3,000 production websites exposing active keys in client-side assets (e.g., JavaScript). CRIL noted that secrets often persist in commit histories, forks, and archived projects, and that automated scanning/indexing can shrink the time from exposure to abuse to minutes—enabling unauthorized API usage, cost fraud, and potential downstream compromise where those keys are tied into broader application workflows.
See attribution, scope, and your downstream exposure.
2 events from the most recent confirmed update back to the earliest known activity.
A viral Instagram and LinkedIn trend encouraging users to ask ChatGPT for caricatures based on what it knows about them drew warnings that employees may be exposing workplace AI use and potentially sensitive information in public LLMs. Security experts said the trend could help adversaries identify high-value targets, support social engineering, and increase risks such as account takeover and prompt-history exposure.
Cyble Research and Intelligence Labs reported finding more than 5,000 public GitHub repositories with hardcoded OpenAI credentials and about 3,000 live production websites exposing active API keys in client-side code and other front-end assets. The findings highlighted that exposed secrets can persist in commit histories, forks, and archived projects and be rapidly discovered by automated scanners.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Artificial intelligence is rapidly transforming the cyber threat landscape, introducing new risks and amplifying existing ones. Recent research revealed that 65% of top AI firms have leaked verified secrets such as API keys and credentials on GitHub, exposing sensitive data and private models to potential compromise. The prevalence of shadow AI—unauthorized or unmonitored AI tools used within organizations—has become a significant blind spot for security teams, as employees increasingly adopt generative AI tools like ChatGPT and Gemini without official oversight. This unregulated use heightens the risk of data leakage and undermines established security controls. Simultaneously, threat actors are leveraging AI to enhance spear phishing campaigns, targeting IT leaders with highly convincing, context-aware messages that are difficult to detect. Security teams are also adopting generative AI to improve open-source intelligence (OSINT) gathering, using these tools to expand keyword searches and identify evolving threat actor slang. The convergence of AI-driven attack techniques and the widespread exposure of credentials underscores the urgent need for organizations to implement robust secret scanning, monitor shadow AI usage, and adapt defenses to counter increasingly sophisticated, AI-enabled threats.
Jun 29, 2026
Multiple reports highlighted escalating **enterprise AI security risk** driven by rapid adoption, weak governance, and widespread *shadow AI* use. Zscaler research reported that **90% of tested enterprise AI systems** had critical vulnerabilities discoverable in under 90 minutes, with a **median 16 minutes** to first critical failure, enabling fast data loss and defense bypass; the same reporting noted sharp growth in AI/ML activity across thousands of apps and rising corporate data transfers into AI tools such as *ChatGPT* and *Grammarly*. Separately, CSO Online reported that **roughly half of employees** use unsanctioned AI tools and that enterprise leaders are significant contributors, reinforcing the risk that sensitive data and workflows are being exposed outside approved controls. Governance and control gaps were further underscored by coverage of **NIST AI guidance** pushing organizations to expand cybersecurity risk management to AI systems, and by reporting on **AI infrastructure abuse** (criminals hijacking/reselling AI infrastructure) and **Hugging Face infrastructure** being abused to distribute an **Android RAT** at scale. Several other items in the set were not about enterprise AI risk specifically, including a **ShinyHunters vishing campaign**, **critical RCE flaws in the n8n automation platform**, an article on the **EU’s alternative to CVE** and potential fragmentation, a piece on a startup’s Linux security overhaul, and an opinion column on human risk management; these are separate topics and should not be treated as part of the same AI-risk story.
Jul 1, 2026
Security leaders are warning that rapid adoption of AI tools—often outside formal governance—creates expanding blind spots and increases the likelihood of **data leakage** and operational incidents. A webcast discussion framed “**Shadow AIT**” as the AI-era evolution of shadow IT, highlighting that AI capabilities are frequently embedded in everyday SaaS features and browser extensions, making it difficult for organizations to accurately inventory where AI is in use and what data is being shared. The panel cited a cautionary example involving *Replit* where insufficient controls around an AI agent reportedly contributed to a production database deletion, underscoring that agentic workflows can translate governance gaps into real outages. Separately, reporting on *Google Vertex AI* raised concerns that **permissions and access control design** in AI platforms can amplify **insider-risk** scenarios if roles, entitlements, and auditability are not tightly managed—particularly where AI services can access or act on sensitive datasets. Commentary-style content also broadly discusses “cognitive AI” and future-facing architectures, but without tying to a specific incident or disclosure; the actionable takeaway across the relevant items is to treat AI enablement as an identity, data-governance, and monitoring problem (inventory AI usage, constrain permissions, and instrument logging) rather than a purely productivity tooling decision.
Jun 29, 2026