Overview
Severity: CRITICAL | Affected: Cognition Labs | Category: breach
Cognition Labs, the creator of the AI software engineer agent 'Devin,' confirmed it was the victim of a major security breach orchestrated by a disgruntled former employee. The company disclosed that the attacker exfiltrated terabytes of sensitive data over several weeks before being discovered. The stolen assets include the complete source code for the current Devin product and, most critically, the proprietary model weights for the unreleased 'Devin 2.0'. The incident has sent shockwaves through the AI industry, highlighting the significant threat posed by insiders with privileged access to crown-jewel intellectual property. Cognition Labs stated it is working with federal law enforcement to investigate the incident and pursue legal action. The public release or sale of these stolen model weights on the dark web could severely damage the company's competitive advantage and represents a significant proliferation risk, as the technology could be repurposed for malicious ends.