Grafana

Sazabi, an AI observability startup, raised $8 million in a seed round led by J2 Ventures, Village Global, and Y Combinator. The platform focuses on log data for engineering teams using AI coding tools and competes with Datadog and Grafana. Funds will support team growth and expansion.

The Grafana data breach occurred due to a missed token rotation after the TanStack npm supply-chain attack. A single GitHub workflow token was not rotated, leading to the breach. The incident highlights the importance of token rotation in preventing such attacks.

Grafana's codebase was stolen and hackers demanded a ransom, but the company refused to pay. The incident occurred on Saturday night. Grafana released a statement confirming the attack and their decision.

Grafana Labs' source code was stolen after hackers breached its GitHub environment using a stolen access token, allowing them to download the company's codebase. The incident occurred due to a compromised token. Grafana Labs disclosed the security breach.

Grafana's GitHub environment was accessed by an unauthorized party, allowing them to download the company's codebase, but no customer data or personal information was compromised. The incident did not impact customer systems or operations. An extortion attempt was made following the breach.

Grafana is offering its AI assistant for free to open source and on-prem users, while cautioning against overuse. The company emphasized its focus on business analytics and announced a 'diet' for Loki at its Barcelona user conference.

Grafana addressed a critical AI bug that could have allowed attackers to leak user data by hiding malicious instructions on controlled web pages. The vulnerability enabled AI systems to process benign-looking commands and transmit sensitive information to attacker servers.