This page collects WhisperX intelligence signals tagged #data leak. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.
A detailed GitHub Copilot prompt, intended for building a private cybersecurity training simulation, has been publicly exposed in a GitHub repository. The prompt outlines the technical specifications for a four-page interactive prototype designed to demonstrate a chained attack against a corporate HR system. The scenar...
A critical security flaw in a library management system's API allows any attacker to bypass access controls and retrieve the entire dataset of borrow records simply by sending an invalid query parameter. The vulnerability, classified as HIGH severity, resides in the `BorrowController.java` file where a silent exception...
A leaked report detailing a new, highly advanced AI model from Anthropic has triggered a sharp selloff in cybersecurity stocks. The premarket slump signals a return of the 'AI disruption' trade, as investors react to a Fortune report indicating the model "poses significant cybersecurity risks." The core tension stems n...
Hyogo Governor Motohiko Saito has avoided indictment but remains at the center of a politically charged information leak case involving a deceased whistleblower. The governor has publicly denied any involvement in the leak of the individual's private information, which occurred prior to the whistleblower's death in Jul...
A draft blog post detailing Anthropic's most powerful AI model to date, codenamed 'Capybara,' was exposed through an unsecured data cache. The company itself has flagged the incident as revealing 'unprecedented' cybersecurity risks, signaling a major internal security failure that precedes any official product announce...
A confidential security planning document, detailing the complete attack surface analysis, specific vulnerabilities, and remediation timelines for an entire codebase, has been mistakenly committed to a git repository. The file, `SECURITY_10X_PLAN.md`, is marked CONFIDENTIAL and contains 60KB of sensitive data, includin...
A critical security triage reveals a live Hugging Face API token has been publicly exposed in the repository's training data for at least 18 hours. The token, with the prefix `hf_sUYKuMlbFnJkwGkewyHNlNKbD...`, was found embedded within two key data files: `training-data/sft/consolidated_root_sft.jsonl` and `training-da...
Anthropic is in a containment race against the internet after accidentally leaking the source code for its Claude Code AI coding agent. The exposure is not a controlled release but a full breach, and the company's efforts to pull back the material are being outpaced by its rapid, permanent spread across the web. The co...
Anthropic has suffered a major intellectual property breach, with the complete source code for its flagship Claude Code product accidentally exposed to the public. The leak occurred when a 59.8 MB JavaScript source map file, intended solely for internal debugging, was included in the public release of the `@anthropic-a...
Anthropic has suffered its second major security breach in days, this time leaking the source code for its proprietary AI coding tool, Claude Code. The incident, which exposed hundreds of thousands of lines of code, potentially reveals the internal architecture of the company's systems and upcoming models, raising imme...
Anthropic has suffered its second major security lapse in days, with the source code for its AI coding tool, Claude Code, leaking online. The breach, which exposed hundreds of thousands of lines of proprietary code, raises immediate concerns about the company's security practices and the potential for malicious actors ...
A critical security vulnerability, CVE-2025-68429, has been disclosed in Storybook, a widely used frontend workshop tool. The flaw, discovered via responsible disclosure on December 11th, is a bug in how Storybook processes environment variables defined in `.env` files. This vulnerability is present in certain built an...
A highly anticipated leak of the Claude Code source code has been weaponized, delivering credential-stealing malware to tens of thousands of eager downloaders. The incident transforms what appeared to be a major AI model leak into a significant cybersecurity threat, with attackers exploiting the hype to distribute the ...
Granola, an AI-powered note-taking app, is shipping with a critical privacy flaw: notes are not private by default. Despite marketing claims of privacy, the app's default settings make any note viewable to anyone who possesses a shareable link, effectively broadcasting potentially sensitive meeting summaries and person...
A critical security vulnerability has been identified within the Athena platform's machine-to-machine OAuth2 client registration system. The flaw exposes plaintext client secrets in server logs, creating a high-risk data leak. The issue is classified as Priority P0 (Critical) and maps directly to the OWASP A02:2021 cat...
The mainnet launch of the Percolator protocol is halted by three critical security failures, each requiring immediate action from a single developer, Khubair. A leaked Supabase service key has been exposed for over seven weeks, the program's upgrade authority remains a vulnerable single keypair, and a migration script ...
A low-severity but persistent information disclosure vulnerability has been identified in the Typefully API integration, where raw error responses are directly exposed to users. The flaw, located in the `src/services/typefully.ts` file, fails to sanitize API error messages before they are thrown, potentially leaking se...
A celebrity's private phone number was exposed to the public due to a critical editing mistake by a YouTube production team. Singer and rapper DinDin revealed he was forced to change his number after the blunder, highlighting a recurring vulnerability where personal data is compromised not by hackers, but by simple hum...
Anthropic has launched its new Claude Mythos Preview AI model under a veil of heightened secrecy and restricted access, a direct response to a significant internal data leak. The cybersecurity-focused AI is now available only to a handpicked consortium of vetted organizations, locking out the broader market immediately...
A recent Steam client update has leaked files referencing an internal AI project dubbed 'SteamGPT,' signaling that Valve is actively developing artificial intelligence tools for its gaming platform. The discovery, made by the automated SteamTracking GitHub project, points to a concrete move beyond industry hype, with t...