26,400 working credentials found in 7.25M Gitee repos as agent-written code outpaces review
vista8 · x · 2026-10-30
A roundup of AI-era security deterioration with hard numbers:
- Embedded browser flaws found in Cursor, Copilot, Codex, VS Code and Claude Desktop; two remain unpatched
- A researcher found 26,400 working cloud/AI credentials across 7.25M public Gitee repos — one usable key per 275 repos
- GitHub says over 40% of September PRs were written by agents, outpacing human review
- Indirect prompt injection lets attackers hijack agents with one planted sentence in any page they read
Author's takeaway: AI replaces execution while humans can't keep up on judgment or security, and the problem will keep compounding.
More from coding & agent
- effect-harness on Cloudflare: run agent loops, tools and credentials on separate VMs — samgoodwin89 · 2026-10-31
- jh3yy: agents gave me flow state — my tools finally keep up with my brain — jh3yy · 2026-10-31
- CAFE ecosystem: Maple moves 300k lines of React to Foldkit in 3 days — samgoodwin89 · 2026-10-31
- Non-coder builds 100-star Android TV launcher entirely with Claude — SuB8u · 2026-10-31
- Factory acquires typedef_ai to give coding agents an enterprise data context layer — maddiehfaulkner · 2026-10-31
- Browser agent's graph reroute wins 5/5 vs 0/5 for trajectory replay, author retracts own number — JeremyCMorgan · 2026-10-31