ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories
ThreatsDay details the RemControl Android banking trojan, a ZCode source leak, and related phishing and ICS risks.
61
- Mentions · 7d0
- Mentions · 30d0
- All mentions5
- First seenSep 18, 2026
- Last mentionedSep 24, 2026
Timeline
5 articles · newest firstZ.ai says sorry for slurping up your code, open sources ZCode
Z.ai apologized after ZCode uploaded developers' workspaces to Alibaba Cloud without disclosure.
64
Z.ai disables coding assistant feature after flaw exposed enterprise code upload risk
Z.ai disabled ZCode features after a default workflow uploaded local code repositories to Alibaba Cloud.
76
ZCode, the GLM coding agent, silently uploads your Git history
Z.ai's ZCode coding agent silently uploads users' full Git history and workspace archives to Aliyun OSS; settings toggles do not stop it.
62
Inside ZCode: Silently Uploading Your Git History to the Cloud
Zhipu's ZCode AI coding app silently packages workspaces, including full Git history, encrypts them, and uploads to Aliyun OSS.
60
Appears with
- Z.aivendor · 3
- Alibaba Cloudorganization · 3
- CAICTorganization · 2
- Z.aiorganization · 2
- NSFOCUSorganization · 2
- Alibabavendor · 2
- Google Playproduct · 1
- Androidproduct · 1
- Zhipuvendor · 1
- Semgreporganization · 1
- GLM-5.3ai model · 1
- MAXproduct · 1
- Cybersecurity and Infrastructure Security Agencyorganization · 1
- Aliyun OSSproduct · 1
- Group-IBorganization · 1
- Claudeai model · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.