AI Agents Overshared
Coding assistants trying to share screenshots quietly posted thousands of private company images to public GitHub pages, including billing records.
Key terms
AP Cybersecurity alignment
- 5.2.A.3Organizations often categorize data according to their sensitivity and prioritize a higher degree of security for more sensitive information.Learning objective: Explain how the state or classification of data impacts the type and degree of security applied to that data.
- 5.2.C.7The principle of least privilege is the idea that entities should be given exactly as much access as they need to perform their function and no more.Learning objective: Determine an appropriate access control model to protect applications and data.
- 5.5.A.3Secure by design includes the concept of secure by default, which is the idea that security features for software and devices should be enabled by default. Devices and software should be secure to use out of the box, with…Learning objective: Identify the application security principles of secure by design and security by default.
AP Networking alignment
- 4.1.A.3When confidentiality is compromised, systems are vulnerable to having sensitive data exposed or stolen. A breach of confidentiality can be identified by: • unauthorized access • network traffic showing exfiltration of…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.
- 4.5.A.1Unauthorized access, data exposure, or disruption of services can result from accidental or intentional misuse of systems by users. These impacts may occur when individuals access resources beyond their role, mishandle data,…Learning objective: Identify the impacts of common threats and vulnerabilities in a managed network.
- 4.5.B.2Security policies and procedures help reduce user-related vulnerabilities by defining acceptable behaviors and standardizing how systems and data are used. These controls can reduce misconfiguration, mishandling, or improper…Learning objective: Determine appropriate security controls to limit the impacts of common threats and vulnerabilities in a managed network.