ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

A new Android banking trojan named RemControl, using AI-assisted phishing overlays and remote control, targets users in Western Europe, the Middle East, and Canada via fake Google Play pages. Separately, Chinese AI firm Z.ai disabled features of its ZCode coding assistant after it was found sending users' local code to Alibaba Cloud without consent, following a similar incident with SpaceXAI's Grok Build.