
ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories
ThreatsDay details the RemControl Android banking trojan, a ZCode source leak, and related phishing and ICS risks.
3
5 stories, newest first · one card per story

ThreatsDay details the RemControl Android banking trojan, a ZCode source leak, and related phishing and ICS risks.
Z.ai apologized after ZCode uploaded developers' workspaces to Alibaba Cloud without disclosure.

Z.ai disabled ZCode features after a default workflow uploaded local code repositories to Alibaba Cloud.

Z.ai's ZCode coding agent silently uploads users' full Git history and workspace archives to Aliyun OSS; settings toggles do not stop it.
Zhipu's ZCode AI coding app silently packages workspaces, including full Git history, encrypts them, and uploads to Aliyun OSS.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views