AI Briefing#data-leak
The latest AI and developer news about #data-leak, with the original source and a short summary.
The latest AI and developer news about #data-leak, with the original source and a short summary.
The GhostShares investigation found that Grok's default 'Anyone with the link' setting and DNS-discoverable hostnames exposed 35,578 apps, affecting 30 external organizations and SpaceXSI/X staff.
The incident, described as a large-scale distillation attack, is ongoing and involves remediation efforts with Anthropic, OpenAI, and Google.
Cloudflare remediated a vulnerability allowing Workers Paid users to recover residual data from other tenants' disk blocks, with no evidence of malicious exploitation.
Meta's AI agent Muse was found to be capable of generating archives containing internal runtime files and sensitive information when integrated with Google Drive.
A hacking incident at generative music AI startup Suno leaked a list of training data unauthorizedly scraped from YouTube, Deezer, and other sources.
A bug has been reported in the Claude Code VS Code extension where the selection state of a closed file is exposed to a new CLI session.
AI agent session logs have been extensively exposed in public GitHub repos.
Fiverr's public URL configuration exposed sensitive customer documents to Google search.
Fiverr's public URL settings on Cloudinary exposed customer files to search engines.