Synopsys Rejects Data-Theft Claim as AI Services Face Cyber Threats

Synopsys is a major supplier of electronic design automation software used across the semiconductor industry, making any compromise a potential supply-chain risk to customers’ intellectual property. The dispute comes as companies rapidly deploy AI platforms and Model Context Protocol services, broadening the attack surface through exposed development tools, workflow systems and connected proxy servers.

Ransomware group D1R claimed it exploited a Synopsys website flaw to access a corporate customer database containing 40,000 records and then used the data to breach Bosch. Synopsys rejected the claim on July 21, saying its monitoring and investigation found no evidence of unauthorized access to company or customer technical data. Separately, exploitation of ServiceNow sandbox-escape flaw CVE-2026-6875 was detected on July 17, while the newly disclosed NadMesh botnet combines more than 20 remote-code-execution exploits and targets AI and MCP services across over 90 cloud-provider network ranges.