Latest / The AI, Privacy, and Security Weekly Update

EP 232.5 Deep Dive - See for Miles and Miles with The IT Privacy and Security Weekly Update for the Week Ending March 4th., 2025
How did Microsoft's Copilot expose private GitHub repositories, and what are the risks?
Copilot accessed over 20,000 private GitHub repositories due to cached data from when they were public. Even after repos were made private, Copilot could still generate responses using this cached data, risking exposure of sensitive information like credentials and corporate secrets.
What is the "nRootTag" exploit in Apple's Find My network?
The "nRootTag" exploit allows attackers to track Bluetooth devices like AirTags without owners knowing. While AirTags use cryptographic keys to change Bluetooth…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.