Source Code

Malicious MCP Servers connected to an AI coding assistant pose a threat by allowing data exfiltration without requiring one obviously harmful instruction. The attack targets sensitive information, including SSH keys, source code, environment secrets, and customer data. To bypass defenses, the malicious tool splits requests into fragments that appear routine and places them in channels already used by the assistant.

Accenture confirmed a security breach after a threat actor claimed to have stolen 35 GB of source code and other data from the company.

A breach of Trellix's source code has highlighted growing supply chain threats, potentially revealing security product controls and detection designs to attackers. This can give attackers an advantage in bypassing security measures. The impact of such breaches is a concern for the security industry.

The source code for Metal Gear Solid 2 HD Edition has been leaked on 4Chan, as reported by TheGamer. The article has 43 points and 10 comments on Hacker News.

Microsoft has released the source code for 86-DOS 1.00 and PC-DOS 1.00 as open source, appealing to retro computing enthusiasts. The release highlights historical software development practices, such as printouts as source repositories and hand-written commit notes.

Vibe coding platform Lovable denied allegations of a data leak where users' sensitive information could be accessed, initially blaming 'intentional behavior' and unclear documentation. The company later shifted blame to HackerOne, a bug-bounty service, amid criticism for mishandling vulnerability reports.