JETBRAINS MARKETPLACE PLAGUED BY 15 API KEY-STEALING PLUGINS
■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
Researchers discovered at least 15 malicious plugins on the JetBrains Marketplace designed to steal AI API keys from developers. The plugins bypassed security checks and posed as legitimate development tools.
■ MORE FROM THE SECURITY DESK
Apple plans to move its Hide My Email feature to a different domain in the coming weeks, a change that could reduce the privacy protection the tool currently provides.
A security researcher discovered a critical vulnerability in FIFA's internal systems that could have allowed unauthorized access to modify World Cup television broadcasts. The flaw exposed multiple internal platforms to potential compromise.
Threat actors are exploiting Steam Workshop to distribute malware disguised as Wallpaper Engine wallpapers. Users downloading compromised content face infection risks.
A new Android banking trojan named Rokarolla is actively targeting 217 banking and cryptocurrency applications through an extensive command set. Security researchers have identified the threat as a significant risk to mobile users.