Malicious VS Code Extensions Steal Code from 1.5 Million Developers
Two VS Code extensions masquerading as AI coding assistants—ChatMoss and ChatGPT中文版—exfiltrated source code, API keys, and proprietary algorithms from 1.5 million developers to servers in China.
European Space Agency Confirms Data Breach, Criminal Investigation Launched
A threat actor using the alias '888' exfiltrated 200GB+ from ESA systems including Bitbucket repositories, API tokens, and contractor data from SpaceX, Airbus, and Thales. Criminal probe initiated.
European Space Agency — Hackers Claim 200 GB of Source Code and Credentials
A threat actor breached ESA's external Bitbucket and Jira servers, claiming 200 GB of source code, API tokens, credentials, and confidential mission documents. A second breach followed within weeks.