Aug 17 2026

Wiz's attack agent exploits a Snowflake repository flaw introduced in a commit co-authored by GitHub Copilot Autofix, extracting a Jira token; GitHub disputes that Copilot wrote the vulnerable lines.

SAFETYINFRA

Original reporting

No source was cited for this one in the issue that logged it. The link above searches for it instead of guessing at a URL.

A June 18th change replaced sanitized input with direct string expansion in a workflow; a crafted issue title could run commands on the runner. Reported and patched June 23rd, disclosed this week.

Named in this event

WizSnowflakeGitHub

Issues that mention Wiz, Snowflake, GitHub

Around the same time

Aug 17 2026SAFETYPEOPLE

OpenAI disbands its Preparedness team, the third safety-focused group closed in two years

search for coverage

Aug 17 2026POLICYMONEY

The DOJ is revealed to have spent nearly a year probing Andreessen Horowitz over partners' seats on competing AI companies' boards, the first known Section 8 push aimed at a venture firm.

search for coverage

Aug 17 2026MONEYPOLICY

Google wins the bankruptcy auction for Spirit Airlines' internal data at $10 million, outbidding Mercor for roughly 100 million emails and 500 million Teams messages to train AI.

search for coverage

Aug 17 2026INFRAADOPT

Cursor launches Origin, code hosting built for agent-scale workloads, in beta for paid plans on the same day GitHub spent four hours partially down.

search for coverage

Aug 16 2026SAFETY

A paper shows encrypted reasoning traces from Anthropic, OpenAI and Google APIs are interchangeable and decodable across sessions and models, recovering 367 personal-information items and 182 live credentials from 315,320 scraped blocks

search for coverage

Aug 16 2026SAFETYPOLICY

A Wyoming woman sues xAI, alleging Grok generated more than 7,000 abuse images from a single childhood photograph, and that xAI's own report to NCMEC omitted identifying details

search for coverage