EMBRACE: AI Coding Tools Leaking SSH Keys — Two Unpatched

Forever Security's EMBRACE research found that AI coding tools including VS Code and Codex can exfiltrate SSH keys and credentials via a single HTML file, with two tools still unpatched and 45 million users exposed. The findings name VS Code and Codex as affected tools and leave two of the tested tools without fixes at publication.

Forever Security's EMBRACE research found VS Code and Codex can drain SSH keys and credentials with one HTML file. Two tools remain unpatched with 45 million users exposed. The post EMBRACE: AI Coding Tools Leaking SSH Keys — Two Unpatched appeared first on byteiota .