Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack
Microsoft shipped its largest Patch Tuesday on record, addressing 622 CVEs, more than triple the previous high. Two zero-days are under active…
Tag: GitHub Copilot
HalluSquatting Attack Exploits AI Coding Assistants to Deliver Botnet Malware
Researchers from Tel Aviv University, Technion, and Intuit have identified a novel attack vector called HalluSquatting that exploits AI coding assistants' tendency…
GitHub Copilot Refuses Harmful Requests in Chat, Then Writes Them in Code
Researchers Abhishek Kumar and Carsten Maple have discovered a novel workflow-level jailbreak method that bypasses safety guardrails in GitHub Copilot. The study,…
GitLost Attack: Public GitHub Issue Tricks AI Agents Into Leaking Private Repo Data
Researchers at Noma Security have demonstrated a novel prompt injection attack, dubbed GitLost, that exploits GitHub Agentic Workflows to leak private repository…
Orca Security’s RoguePilot Attack Exploits GitHub Copilot Prompt Injection
Orca Security demonstrated RoguePilot, a prompt injection attack that uses hidden prompts in GitHub issues to make Copilot leak privileged tokens.
GitHub Copilot
GitHub Copilot is an AI-powered code completion tool developed by GitHub and OpenAI. It was part of the Developer Tools category with…