An adversary who steals your ChatGPT conversations might see a lot more than your recent query asking “how do you dance at a party”—they might also figure out your organization’s intellectual property and strategy.

IBM, in its annual X-Force Threat Intelligence Index, reported that infostealers snatched 300,000 ChatGPT credentials last year. The finding suggests that AI is providing a new spin on a common cybersecurity threat, business email compromise, as adversaries target chatbots rich with potential IP, search histories, and strategy docs.

“Instead of a business email compromise, you have a threat actor hiding in the AI prompting. So, they can really just sit, and watch, and discover what you’re trying to develop,” Ryan Anschutz, North America leader for IBM’s X-Force incident response team, told IT Brew.

What’s in it for the adversary?—BH

An employee can undo most mistakes with ctrl + z (or command + z if you’re on a Mac). But when an AI agent makes a mistake like deleting an entire database, how do you roll that back?

In a string of posts on X in July 2025, Jason Lemkin, founder of entrepreneur-community company SaaStr, shared how Replit’s vibe-coding tool, by its own admission, “made a catastrophic error in judgment” and deleted a database without permission. That mistake was ultimately reversed thanks to code “checkpoints,” Replit spokesperson Patrick Purvis shared with us at the time, but it raised interesting questions over the permanence of agentic decisions, as well as the rollback mechanisms available for AI users.

“Treat your agents like interns,” CJ Combs, senior AI consultant at consultancy Columbus, advised. “If you’re going to give them destructive commands or service-interrupting commands, you definitely want to be able to have a way to recover said data if that agent has those capabilities.”

Flip it and reverse it.—BH

The Salesforce cybersecurity incident from last summer may feel like the distant past, but companies report they’re still experiencing attacks as a result of that initial incursion.

Brief me on the original attacks. The Salesforce incidents happened in 2024 and 2025. The first attack was from UNC6040, a group that used social engineering to access Salesforce customers’ data; they now refer to themselves as “ShinyHunters.”

ShinyHunters is a threat group that broke onto the cyber scene in 2020, according to Bugcrowd. These attackers start by identifying organizations that utilize Microsoft’s Office 365 and then search for businesses that store GitHub open authorization tokens for further supply-chain attacks.

Salesforce faced a second cybersecurity incident in August 2025 when Salesloft announced that it had detected a security issue in its Salesloft Drift application, an AI-powered sales engagement platform that lets sales teams integrate Salesforce instances into their AI chatbot workflows.

The attackers (UNC6395) are reportedly not part of ShinyHunters, but Cory Michal, VP of security at AppOmni, told IT Brew there might be some kind of overlap. The threat actors used stolen OAuth credentials to pull sensitive data from Salesforce customer instances.

Some say they experienced data theft in connection to the attack.—CN

After years in research labs, quantum computing is edging closer to real-world deployment. Here’s why industry advocates say the technology is ready to tackle logistics, healthcare, cybersecurity, and defense challenges.