Orca Security’s RoguePilot Attack Exploits GitHub Copilot Prompt Injection

Orca Security demonstrated RoguePilot, a prompt injection attack that uses hidden prompts in GitHub issues to make Copilot leak privileged tokens.