#gitlost

· 4mo ago

GitLost Attack Exploits GitHub Agentic Workflows Preview 🔗 https://cybersecurefox.com/en/gitlost-github-agentic-workflows-data-leak #gitlost #github #agentic #workflows #ai #agents #prompt #injection #private #repositories

cybersecurefox.com

Sam Stepanyan

🐘 @securestep9@infosec.exchange

· 4mo ago

#AI: GitHub AI allows unauthenticated attackers to pull data from private repositories by posting a crafted GitHub Issue in a public repository. Noma Security research dubbed this prompt injection attack #GitLost: #AISecurity 👇

noma.security

GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos | Noma Security

Noma Labs found a prompt injection flaw in GitHub Agentic Workflows that let an unauthenticated attacker leak private repo data via a crafted GitHub Issue.

You've seen all posts