While “safe-to-use” policies and security training largely kept shadow IT under control, a new problem is emerging: the growing influence of AI-assisted coding tools.

Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python repositories.