AI-Powered App Exposes User Data, Creates Risk of Supply Chain Attacks
· Source: trendmicro.com
In short
Trend Micro researchers discovered that Wondershare RepairIt, an AI-powered photo and video enhancement application, exposed sensitive user data through insecure cloud storage practices and hardcoded credentials. The security flaws allowed access to user photos, AI models, software binaries, and company source code, creating risks of model tampering and sophisticated supply chain attacks. Attackers could potentially manipulate AI models or executable files to distribute malicious payloads through legitimate software updates.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 39, 2025: Agentic AI Drives Supply Chain Autonomy, Cutting Costs and Boosting Throughput
Tags: security, supply-chain, vulnerability, AI-models, data-exposure, devsecops