Smashing Security podcast #463: This AI company leaked its own code. It’s also built something terrifying

This article discusses a concerning trend where AI companies are inadvertently leaking their own code and becoming targets for malicious actors. Tanya Janca highlights the vulnerability of software developers, particularly those working with CI/CD pipelines, who are being targeted for credential theft and potentially compromised code insertion. The piece emphasizes the importance of developer security awareness and the need for organizations to better secure their software supply chains, especially given developers' access to privileged accounts and CI/CD systems.