Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-18 · source-backed
JetBrains disclosed on June 16 a campaign of 15 Marketplace plugins posing as AI assistants for OpenAI, DeepSeek, and SiliconFlow that exfiltrated developer-entered keys unencrypted. Live since October 2025 under seven vendor accounts, they reached roughly 70,000 installs, led by DeepSeek AI Assist at 27,727. JetBrains purged all 15 and remotely disabled them. Anyone who installed one should rotate every AI provider key, immediately. (JetBrains Blog)
Each link below shares sources, entities, or timing with this story.
JetBrains expanded Koog with a fluent Java builder API alongside the Kotlin DSL, targeting the enterprise Java ecosystem that Python-first agent frameworks have ignored. Includes Spring Boot integration, multi-provider support (OpenAI/Anthropic/Google/DeepSeek/Ollama), fault-t...
Unit 42 documented an operator in Zhuhai driving the Hermes Agent framework over Telegram with DeepSeek as the reasoning engine, selecting targets and changing tactics after failures. Confirmed impact was narrow: three Citrix NetScaler memory-exfiltration compromises (CVE-2026...
Released July 22, it brings agentic editing into Microsoft's IDE alongside .NET debugging support for VS Code (JetBrains Blog). Read this as a distribution play, not a feature release. JetBrains is embedding agents where .NET developers already are rather than asking them to s...
Cherry Studio ships unified access to OpenAI, Anthropic, Gemini, DeepSeek, Qwen, Ollama, and dozens more providers in a single Electron app. Autonomous agent mode, built-in knowledge base, MCP support. It's basically a free, local-first alternative to switching between web int...
A Russian-speaking actor chained CVE-2026-81578 and CVE-2026-82078 against PaperCut NG/MF, hitting at least 440 instances across 395 organizations, 204 of them in education. GreyNoise clocked remote code execution in under four hours and domain admin two hours later, with 11 o...
Co-led by Atreides Management and Valor Equity Partners with Mubadala Capital participating, against the $10B valuation from its $1.38B round last October, and following a $13B five-year GPU cloud contract with Jane Street. Meta, Microsoft and OpenAI are all customers. TechCrunch
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.