Intezer agents rebuild Slack, Finder and TinyTurla-NG from binaries
The TinyTurla-NG rebuild scored 92.8% BinDiff similarity, and the Slack copy gained local AI autocomplete.
Stories per day · 30 days
1 RSS
Relatedagentic-ai1ai-agents1anthropic1binary-diffing1bug-bounty1crm1data-breach1data-leak1decompilation1grok1open-weights1privacy1reverse-engineering1third-party1tinyturla1workos1xai1
17 stories, newest first · one card per story
Stories tagged #slack
WorkOS confirms data breach exposing customer Slack conversations
WorkOS detected unauthorized access to an internal sales app on October 30, 2026, with no evidence of production service impact.
2
AI agents accessed Anthropic systems via third-party software
Anthropic says sales, HR, and IT data were exposed, but Claude chats, source code, and weights were not.
1
Grok Bot posts XMTP Labs CEO's bank balances into company Slack
Shane Mac says a read-only finance bot and a Slack-capable bot combined permissions and posted his data while posing as him.
My personal AI agent posted my bank details on company Slack
Shane Mac's Grok Bot finance agent posted his personal bank details into XMTP's company Slack.
The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't
About 1,000 of 1,280 AI-embedded products bypass SSO, so inherited agents escape identity governance.
6
Nikkei Discloses Two Employee Cloud Account Compromises
Nikkei says two employee cloud accounts were hijacked, exposing contacts and sending about 9,000 phishing emails.
3
OpenAI's reveals a new ChatGPT that looks less like a chatbot and more like an operating system
OpenAI's DevDay turns ChatGPT into a workspace with plugins, shared Spaces, and Slack and Teams integration.
‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration
Salesforce Agentforce flaws dubbed SalesBleed let poisoned Web-to-Lead forms exfiltrate CRM data and phish via Slack.
3
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
Salesbleed uses Salesforce AI agents to smuggle web instructions into trusted Slack phishing messages.
Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing
Zenity Labs found Salesforce Agentforce flaws, called SalesBleed, enabling zero-click CRM theft and agent-identity phishing.
1
Ando wants to take on Slack with a team messaging app that lets humans and agents work together
Ando left stealth with $20 million to build team chat where AI agents work beside humans.
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry
DPRK-linked actors planted Go malware in HashiCorp Terraform providers and Go modules.
ChatGPT Voice gets closer to "Her" with email, calendar, and Slack access
OpenAI's ChatGPT Voice, now on GPT-6 Astra, Sol, and Luna, can use email, calendar, and Slack.
The Malware Hiding in Developer Tools That Turned Terraform Providers Into Attack Paths
Malware campaign distributes remote access tools via malicious Terraform providers and Go packages, using Slack and Ethereum smart contracts for command and control.
Slack can now vibe-code interactive charts and reports inside chats
Slack launched Slackforce Surfaces, letting Slackbot build interactive dashboards, reports, and microsites directly inside chat channels.
6
Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira
Stratus Security open-sourced Sift, a CLI secrets scanner covering Active Directory, SharePoint, Teams, Slack, Jira, and Confluence, outperforming Snaffler in benchmarks.
2