Mandiant reports that an attacker hijacked an active AI coding assistant session at a SaaS provider. By tricking the assistant into recommending poisoned software, the ‘Shai-Hulud’ worm spread across approximately one hundred internal code repositories, exfiltrating source code and secrets.

ai-securitysupply-chaincode-repositoriesmalware
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →