https://vibecoded.ca/brief A free weekly email on AI attacks, LLM flaws and the app security failures that hit fast-built products, and what to fix before launch. en-CA https://vibecoded.ca/brief/8-patch-netscaler-then-read-the-labcorp-terms https://vibecoded.ca/brief/8-patch-netscaler-then-read-the-labcorp-terms Tue, 29 Sep 2026 13:00:00 +0000 Your AI agents are logging in as humans and SOC 2 cannot tell. A vendor-authored piece argues that AI agents often operate through human credentials, so actions taken by an agent look identical to actions taken by the person whose credentials it borrowed. A stolen OAuth token from a former employee's laptop. CrowdSec confirmed that attackers took the contents of 170 private repositories from its GitHub organisation. https://vibecoded.ca/brief/7-fake-government-requests-real-ai-attacks https://vibecoded.ca/brief/7-fake-government-requests-real-ai-attacks Tue, 22 Sep 2026 13:00:00 +0000 A regulator has now logged an AI agent as the attacker. The Spanish data protection agency received a breach report describing an attack carried out by an AI agent running on a known large language model. https://vibecoded.ca/brief/5-court-records-drivers-licences-and-an-ftc-bill https://vibecoded.ca/brief/5-court-records-drivers-licences-and-an-ftc-bill Tue, 08 Sep 2026 13:00:00 +0000 AI coding agents are pulling packages nobody registered. Researchers scanned 6,214 live domains belonging to defence contractors, Fortune 500 and large tech companies and found 8,265 llms.txt and llms-full.txt files. https://vibecoded.ca/brief/4-what-cisas-two-red-teams-say-about-your-soc-2 https://vibecoded.ca/brief/4-what-cisas-two-red-teams-say-about-your-soc-2 Tue, 01 Sep 2026 13:00:00 +0000 Two arrests in the TeamPCP open-source supply chain spree. The Australian Federal Police arrested two men in Western Australia, aged 21 and 23, over alleged membership in TeamPCP. https://vibecoded.ca/brief/2-secrets-in-build-artifacts-and-who-gets-blamed https://vibecoded.ca/brief/2-secrets-in-build-artifacts-and-who-gets-blamed Tue, 18 Aug 2026 13:00:00 +0000 The LiteLLM fallout is a CI credential problem, not an AI problem. A 153GB archive stolen in the LiteLLM supply chain attack has surfaced, containing 433,909 files. https://vibecoded.ca/brief/1-a-250-000-penalty-and-a-vendor-that-went-dark https://vibecoded.ca/brief/1-a-250-000-penalty-and-a-vendor-that-went-dark Tue, 11 Aug 2026 13:00:00 +0000 Hidden prompt injection is showing up in "Ask AI" buttons on marketing pages. Researchers observed production websites embedding hidden prompt injection payloads inside pre-filled deep links behind "Ask AI" buttons, including on marketing and competitor comparison pages.