#gitlost

GitLost Attack Exploits GitHub Agentic Workflows Preview 🔗 https://cybersecurefox.com/en/gitlost-github-agentic-workflows-data-leak #gitlost #github #agentic #workflows #ai #agents #prompt #injection #private #repositories

#AI: GitHub AI allows unauthenticated attackers to pull data from private repositories by posting a crafted GitHub Issue in a public repository. Noma Security research dubbed this prompt injection attack #GitLost: #AISecurity 👇 https://noma.security/blog/gitlost-how-we-tricked-githubs-ai-agent-into-leaking-private-repos/