| ▲ | cwiggs 2 hours ago | |
No one wants to talk about the "internal AI Tool" being used to elevate to not 1 but 2 DevOps engineers? > use of an internal AI tool as a springboard. The attacker leveraged the compromised computer of engineer B and used an internal AI tool to gain control over the Wallet DevOps Engineer A and another Wallet Software Engineer C. The attacker soon discovered Wallet DevOps Engineer A had a container deployment permission token on his computer. With the AI craze going on recently I've worked at multiple companies where an internal AI tool was vibecoded and I've always been worried about the security implications. | ||