We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
Hacker News·Jun 9·5 min read
Microsoft's open source tools were hacked to steal passwords of AI developers
TL;DR
AI developers faced a security issue when Microsoft's open source tools were compromised, leading to password theft. The attack specifically targeted tools like GitHub and Azure DevOps, which are widely used in AI development.
✦ Why It Matters
Engineers should prioritize security practices to protect their credentials and sensitive project data.
Key Takeaways
- Check if your tools are among the affected Microsoft projects.
- Update your passwords and enable two-factor authentication.
- Monitor for unusual account activity related to your development tools.
- Stay informed about security updates from Microsoft and other tool providers.
Full Summary
Microsoft's open source projects on GitHub were hacked, resulting in the injection of password-stealing malware targeting AI developers. The compromised tools include those related to Microsoft's Azure cloud service and popular development applications like VS Code.
Security firms Cloudsmith and OpenSourceMalware identified the malware, which captured sensitive credentials when users interacted with the affected tools. Microsoft has temporarily removed access to at least 70 projects and is actively investigating the breach.
Some repositories have been restored after review, while others remain offline. This incident marks a significant supply chain attack, highlighting vulnerabilities even in large tech companies like Microsoft, which typically have robust security measures.