AI Security This Week: RoguePilot, Memory Poisoning, and 2,800 Leaked API Keys
GitHub patches critical Copilot takeover flaw, Microsoft warns of AI memory manipulation attacks, and thousands of Gemini API keys are found in public code.
Tag
#api-keys
Clone a Repo, Lose Your API Keys: Claude Code's Trojan Horse Vulnerabilities
Security researchers found that simply opening an untrusted repository in Claude Code could execute arbitrary commands and steal your Anthropic API keys - all before you saw a warning.
Moltbook: The 'Social Network for AI Agents' Is a Security Catastrophe
A vibe-coded Reddit clone for bots exposed 1.5 million API keys, let anyone hijack any agent, and turned prompt injection into a contagion. Here's how it happened.
Moltbook Security Breach: 1.5 Million API Keys Exposed in Vibe Coding Disaster
The AI-only social network launched with an unsecured database. Anyone could hijack any agent. This is what happens when you vibe code your way to production.