GitLost Attack: Public GitHub Issue Tricks AI Agents Into Leaking Private Repo Data
Researchers at Noma Security have demonstrated a novel prompt injection attack, dubbed GitLost, that exploits GitHub Agentic Workflows to leak private repository…
Tag: Orca Security
Orca Security’s RoguePilot Attack Exploits GitHub Copilot Prompt Injection
Orca Security demonstrated RoguePilot, a prompt injection attack that uses hidden prompts in GitHub issues to make Copilot leak privileged tokens.