Zhipu AI announced on Monday that it completed technical remediation of its ZCode AI coding tool, deleting all cloud data involved in a data upload incident with deletion verified by the China Academy…
Group-IB reported that RemControl, a previously undocumented Android banking trojan first observed in July 2026, is targeting retail banking customers in Italy, France, Spain, Poland, Portugal, the Mi…
Developer tool agent-limit-retry launched as a Claude Code plugin that resumes subagents killed by usage limits by id instead of re-dispatching them, according to the project's Show HN post. The tool …
Z.ai published its ZCode coding harness under Apache-2.0 on GitHub on September 20, 2026, after apologizing for the tool silently uploading users' git history, but the zai-org/ZCode repository contain…
Zhipu released ZCode version 3.14.0, removing the RepoWiki feature and the paths that generated and uploaded local repository snapshots, after users raised concerns the AI coding tool could upload pro…
Independent developer Ferstar found on September 18 that Z.ai's ZCode coding assistant had compressed a 345.5MB commercial workspace of 42,411 files — 86.6% of it Git history — into encrypted archives…
Z.ai disabled the repository-snapshot upload workflow in its ZCode coding assistant and shipped the fix in ZCode v3.14.0 after an independent Chinese blogger, Ferstar, found that a default-enabled set…
A developer has released repowiki, an MIT-licensed, PyPI-published open-source tool that handles the deterministic orchestration of generating repository wikis so that coding agents such as Claude Cod…
Z.ai apologized and said it fixed a default-enabled codebase indexing feature in its AI coding tool ZCode after a developer discovered a 313MB encrypted snapshot on September 18 containing roughly 345…
Zhipu has open-sourced the code behind its ZCode AI coding workbench on GitHub after apologizing over a data-handling dispute and completing a remediation process, IT Home reported. Zhipu also said it…
Z.ai open-sourced its ZCode AI coding agent under an Apache-2.0 license on September 21st, saying it had completed remediation of security problems and apologizing to users, after a September 18th rev…
ZCode, an AI coding workspace with desktop, browser, and terminal interfaces, has been released as open source under the zai-org GitHub organization following a controversy over the alleged theft of u…
Z.ai released ZCode, an AI coding agent harness distributed as an open repository containing an Electron desktop app, a browser workbench, and a terminal Agent CLI that runs via the `zcode` command. T…
A security researcher known as ferstar documented that ZCode, an AI coding desktop app from Zhipu, silently packaged entire Git repositories—including full commit history and LFS assets—into encrypted…
Two independent investigations found that ZCode, a GLM-based coding agent, has been quietly uploading users' git history and full workspace snapshots to remote servers. The findings prompted a warning…
The closed-source ZCode AI coding agent silently packaged and uploaded a developer's entire local workspace to Alibaba Cloud, with the full .git history accounting for 86.6% of a 42,411-file encrypted…
A developer's analysis of three recent security incidents — the ZCode coding agent silently uploading users' Git history to the cloud, a heap overflow and SSO misconfiguration chain that reached OpenA…
Z.ai said it will open-source the ZCode codebase and invite independent third-party evaluators to audit the system after users reported that ZCode uploaded repository data to its own cloud with no opt…
Security researcher J. F. Zhang reported on September 18th that Z.ai's ZCode desktop app packages developers' workspaces, including complete Git histories, and uploads encrypted snapshots to Alibaba C…
Victor Taelin relaunched his Bend language as Bend 2, a proof checker that refuses AI-written code unable to prove it preserves rules stated in a LAWS.bend file, and the first outside measurement by L…