Z.ai Disables Coding Assistant Features Following Security Breach
· Technology · Indian Express, Economic Times
Beijing-based startup Z.ai has disabled features of its AI coding assistant, ZCode, after reports that the tool was uploading local code repositories to Alibaba Cloud without user consent. The company apologized and stated the issue stemmed from a 'Codebase Indexing' feature that was enabled by default. While Z.ai claimed to have patched the vulnerability and deleted the data, some developers expressed concerns that files remained encrypted with a private key held only by the company. This incident follows global warnings regarding frontier AI security risks and recent reports of hacking incidents involving other AI firms.
Why it matters
The breach raises significant concerns about data privacy and the security of proprietary code when using AI-assisted development tools. It highlights the potential risks associated with automated data indexing features in AI software.
Read the original report — Indian Express
Join us on Telegram
Breaking news the moment it lands. At 10,000 members we ship the Android app.