A researcher proved Grok Build CLI sent full repos, 27,800x more data than the task needed, to a Google Cloud bucket. xAI had said no code was transmitted.

The Check Point Research AI Security Report 2026, published by Check Point Software Technologies , describes a cybersecurity ...

Microsoft is extending Dataverse into coding-agent marketplaces while expanding its MCP tools, certification program and governance controls.

xAI's Grok Build coding CLI was uploading entire Git repositories, full commit history and all, to a Google Cloud Storage bucket run by xAI, not just the files a coding task needed. A researcher ...

You can thank OpenClaw for this.

A new attack technique dubbed HalluSquatting turns AI assistants’ tendency to hallucinate into a scalable infection vector.

Researchers warn AI agents could be tricked into downloading malicious code by exploiting hallucinations that cause chatbots ...

Attackers can exploit how AI bots hallucinate software URLs to create massive botnets. The vulnerability is endemic to every ...

Former GitHub CEO Thomas Dohmke's startup Entire is rolling out a distributed network for mirroring code repositories, making ...

The offices of Google are pictured in London on February 28, 2026. JUSTIN TALLIS/AFP via Getty Images Google released agents-cli on April 21, 2026, and it has shipped 13 updates in the 71 days since — ...

A github.dev flaw could let attackers steal GitHub OAuth tokens through a one-click attack, exposing private repositories and codebases. A single click on the wrong repository could have put a ...

In April, GitHub announced that it was moving subscribers from request-based billing to a usage-based model for its AI-powered Copilot service. As that new pricing model goes into effect today, many ...