AI keys get stolen, AI finds hypervisor bugs, OpenAI moves into Git
7 stories~2 min read
- Top storySecurity
WorkOS, Northflank and Trigger.dev disclose breaches as attackers hunt AI keys (opens in a new tab)
At least a dozen AI developer platforms were hit in the past month, SecurityWeek says, with WorkOS, Northflank and Trigger.dev the latest. If you store API keys on a hosted platform, rotate them at the issuer and scope them tightly.
- Security
Xen flaw lets a malicious guest VM read and write other VMs' memory, including dom0 (opens in a new tab)
XSA-523 (CVE-2026-102703 and CVE-2026-102704) affects every Xen release since 4.6 and has no workaround, only patches. Anyone running Xen-based hosts, from XCP-ng to Qubes, should patch now. The Xen Project credits Anthropic's Claude with finding them.
- Security
Binance says a fake job interview and coding test started its $6.34B hack (opens in a new tab)
Its incident report says attackers, whom the FBI links to North Korea, planted malware through a take-home assignment, then used an internal AI tool to take over wallet engineers' computers. Run unknown code in a throwaway VM, and treat internal AI tools as privileged access.
- Dev Tools
OpenAI agrees to buy Pierre, maker of Git storage tools used inside Codex (opens in a new tab)
Pierre builds Code Storage, a Git backend designed for machines, plus the Trees and Diffs libraries. AI labs now want to own where agent-written code lives, not just who writes it. Pierre's open-source projects will stay open.
- AI
Apple opens Siri AI to all developers through App Intents in iOS 27.3 beta (opens in a new tab)
Any app can now expose actions and content to Siri AI and chain them with skills, though the preview only runs in development builds and internal TestFlight. App Store submissions open in spring, so pick which actions deserve solid interfaces.
- Business
AMD posts record $13.4B quarter as data center sales nearly double (opens in a new tab)
Data center revenue hit $8.5 billion, up 97%, on Instinct GPU and EPYC demand, and AMD guided about $17 billion, plus or minus 3%, for next quarter. Stronger competition for Nvidia should mean more choice and better pricing for AI compute.
- Security
UK cyber agency expects AI-powered ransomware to hit critical infrastructure by 2028 (opens in a new tab)
The NCSC's annual review, covering 337 incidents in its latest year, calls this "highly likely" but says AI is speeding up old attacks, not inventing new ones. Fixing long-known weaknesses still matters most, especially for teams building systems for energy, transport or health.