Z.ai Exposes User Code, Sparks Security Concerns

Z.ai was found packaging and uploading entire user workspaces to Alibaba Cloud without proper safeguards, exposing user code and sensitive data, according to reports on the platform's recent mishap. The company said it is taking steps to prevent such incidents in the future, including a new security vulnerability reporting process.

Z.ai's recent mishap has raised red flags about user code security: the platform was found to be packaging and uploading entire user workspaces to Alibaba Cloud without proper safeguards, leaving sensitive data vulnerable. Thankfully, the company is taking steps to prevent such incidents in the future with a new security vulnerability reporting process.