Loading story…
Trend Micro researchers discovered that Wondershare RepairIt, an AI-powered image and video enhancement app, exposed sensitive user data and proprietary assets due to hardcoded cloud credentials and poor DevSecOps practices. The exposed cloud storage allowed both read and write access, enabling attackers to manipulate AI models and software binaries, creating significant supply chain attack risks. The vulnerabilities, assigned CVE-2025-10643 and CVE-2025-10644, highlight the need for strict access controls, secure credential management, and alignment between privacy policies and actual data handling.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
The Hacker News reported the discovery of two critical vulnerabilities in Wondershare RepairIt that could expose user data and AI models, bringing public attention to the security impact of the flaws.
Trend Micro published research on an AI-powered application that exposed user data and introduced potential supply chain attack risks, indicating that insecure implementation could affect both end users and downstream environments.
RedHunt Labs reported a wave of exposed secrets in "vibe coded" AI-generated sites as part of Project Resonance, highlighting a broad pattern of credential and secret leakage across publicly accessible web projects.
3 references tracked. Mallory keeps watching after this page renders.
thehackernews.com
Open sourceredhuntlabs.com
Open sourcetrendmicro.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
AI-powered tools and agents are increasingly being adopted in both personal and professional environments, but this rapid integration is outpacing the implementation of adequate security measures. A recent study by the National Cybersecurity Alliance and CybNet found that 43% of workers have shared sensitive information, including financial and client data, with AI tools such as ChatGPT and Gemini, often without any formal training on the associated risks. This widespread use of generative AI has introduced significant data security and privacy concerns, as many employees are unaware of the potential for data leakage or misuse. The vulnerabilities of AI-powered applications are further highlighted by the discovery of two critical flaws in Wondershare RepairIt, an AI-based repair tool used by millions. According to Trend Micro, RepairIt not only contradicted its privacy policy by storing user data in unsecured cloud storage but also exposed users to supply chain attacks by allowing attackers to swap or modify AI models, potentially infecting countless users through a single update. The vulnerabilities in RepairIt were rated with CVSS scores of 9.1 and 9.4, among the highest for consumer AI applications this year, underscoring the severity of the threat. In another case, Notion’s release of version 3.0 with AI agents introduced a new attack vector where prompt injection could be used to exfiltrate confidential data. By embedding malicious instructions in a PDF, attackers could instruct the AI agent to collect and transmit sensitive information to an external server, exploiting the agent’s access to private data and its ability to communicate externally. This attack demonstrates the inherent risks when AI agents are given broad access and communication capabilities without sufficient safeguards. The broader landscape of AI-driven threats is also evolving, as highlighted by the 2025 Global Bot Security Report, which found that most websites remain vulnerable to even basic automated attacks, let alone sophisticated AI-powered bots. Traditional security defenses are struggling to keep pace with the complexity and speed of AI-driven threats, making it increasingly difficult to distinguish between benign and malicious AI activity. Anthropic’s release of Claude Sonnet 4.5, a large language model with enhanced safety and security features, represents an industry effort to address these challenges. The model incorporates advanced safeguards against prompt injection, internal security measures to protect model weights, and restrictions on queries related to dangerous topics. However, even with these improvements, the risk of false positives and the need for ongoing vigilance remain. Collectively, these incidents and studies illustrate the urgent need for organizations to implement robust security training, enforce strict data handling policies, and adopt advanced technical safeguards when deploying AI-powered tools and agents. The convergence of user behavior, technical vulnerabilities, and evolving threat tactics is creating a complex risk environment that demands proactive and comprehensive security strategies.
Jun 29, 2026
A critical vulnerability was discovered in GitHub Copilot Chat that could have allowed attackers to exfiltrate private source code and sensitive secrets from repositories by exploiting the platform’s AI assistant and image proxying service. The flaw, identified by Legit Security researcher Omer Mayraz, involved a sophisticated attack chain that combined remote prompt injection with a bypass of GitHub’s content security policy. Attackers could embed hidden prompts within pull request comments or other repository content, which Copilot Chat would process without proper isolation or validation. This allowed the attacker to manipulate Copilot’s responses and assemble signed image links that leveraged GitHub’s Camo image proxy service to transmit stolen data outside the platform. The exploit, dubbed "CamoLeak," demonstrated that even advanced AI-powered developer tools can be manipulated to leak confidential information, including passwords and private keys, with minimal user awareness. The proof-of-concept attack showed that the exfiltration channel was subtle enough to evade detection by both users and GitHub’s monitoring systems. GitHub Copilot Chat’s context awareness, which enables it to read repository files, pull requests, and other workspace artifacts, was a key factor in the attack’s success, as it provided the AI assistant with access to sensitive data that could be extracted through manipulated prompts. Upon responsible disclosure via HackerOne, GitHub responded by disabling image rendering in Copilot Chat and patching the vulnerability as of August 14. The incident highlights the growing risks associated with integrating AI agents into software development workflows, especially when such agents have broad access to sensitive project data. Security experts noted that while the attack was limited in the amount of data it could exfiltrate at once, the potential impact was significant due to the nature of the information at risk. The case underscores the importance of rigorous security validation for AI-driven features and the need for continuous monitoring of new attack vectors as AI adoption accelerates in development environments. GitHub’s swift response and remediation efforts were commended, but the event serves as a cautionary tale for organizations relying on AI-powered coding assistants. The vulnerability also illustrates the creative lengths attackers may go to bypass security controls, turning legitimate platform features like image proxies into covert data exfiltration channels. The research community continues to scrutinize AI integrations for similar weaknesses, emphasizing the need for secure-by-design principles in next-generation developer tools. Organizations are advised to review their use of AI assistants, ensure prompt application of security updates, and educate developers about the risks of prompt injection and related attacks. The incident has prompted broader discussions about the balance between AI functionality and security, especially as more platforms embed intelligent agents into core workflows. Ultimately, the GitHub Copilot Chat vulnerability demonstrates both the promise and peril of AI in software development, reinforcing the need for vigilance and proactive defense measures.
Jun 29, 2026
Researchers disclosed **Workflow Identity Hijacking**, an authorization-design weakness in enterprise AI automations that lets an unauthenticated party submit a benign request through channels such as public inboxes, web forms, issue trackers, support platforms, shared documents, or chat. The workflow can then invoke connected tools using a privileged non-human identity, service account, developer API key, or creator credential, potentially retrieving and returning internal data to the attacker. The exposure does not require prompt injection, model jailbreaking, credential theft, or model manipulation: the AI and its tools perform their intended functions, but the original requester's identity and permissions are not carried into downstream actions. Defenders should inventory AI workflows and associated privileges, trace untrusted inputs, bind sensitive operations to authenticated requester authorization, replace persistent administrative credentials with short-lived scoped tokens, separate sensitive-data retrieval from external responses, treat model output as untrusted, and log requester-to-action authorization context.
Sep 10, 2026