dlvr.it Jul 07
GitHub AI agent leaks private repos when asked nicely:
Per usual, there's no fix - or even any documentation - for GitLost
theregister.com/security/2026/07/07/github-ai-agent-leaks-private-repos-when-asked-nicely/5267924
Story Details
| Last Updated | |
| Total Articles | 4 |
More articles on this subject
Previous
dlvr.it Jul 07
GitHub AI agent leaks private repos when asked nicely: Per usual, there's no fix - or even any documentation - for GitLost
theregister.com/security/2026/07/07/github-ai-agent-leaks-private-repos-when-asked-nicely/5267924
Next
Similar to This
Previous
dlvr.it Oct 26
Worm armed 42 GitHub repos by hiding a payload too big to fail: Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search
theregister.com/security/2026/10/26/worm-armed-42-github-repos-by-hiding-a-payload-too-big-to-fail/5305570
Github competitor Entire is live now - how the agent-first platform works - ZDNET
zdnet.com/innovation/enitre-github-competitor-trail-git-forge/
Anthropic's Mythos kept hacking even when it knew people could get hurt: Anthropic said its Mythos 5 model almost never stopped a cyberattack once it began ...
businessinsider.com/anthropic-mythos-hacking-github-report-2026-10
The New Stack Oct 16
Hackers hijacked 1,900 GitHub accounts. Then they went after 30,000 repos.: GhostAction hijacked about 1,900 GitHub accounts to plant credential-stealing Actions ...
thenewstack.io/hackers-hijacked-1900-github-accounts-then-they-went-after-30000-repos/
dlvr.it Aug 20
AI agent suggested installing a malware package. Engineer almost took its advice: Fortunately, the company had a policy of checking source code on GitHub first
theregister.com/security/2026/08/20/ai-agent-suggested-installing-a-malware-package-engineer-almost-took-its-advice/5289849
dlvr.it Aug 17
An AI broke Snowflake's code. Then another AI agent exploited it: Don't worry, this one was via a bug bounty program
theregister.com/security/2026/08/17/an-ai-broke-snowflakes-code-then-another-ai-agent-exploited-it/5288666
krebsonsecurity.com Jul 13
Lessons Learned from CISA’s Recent GitHub Leak: The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a ...
krebsonsecurity.com/2026/07/lessons-learned-from-cisas-recent-github-leak/
dlvr.it Jul 08
Former GitHub CEO launches competitor designed for the age of vibe coding: As GitHub struggles to manage AI load, challengers take aim
theregister.com/ai-and-ml/2026/07/08/former-github-ceo-launches-competitor-designed-for-the-age-of-vibe-coding/5268694
Clean GitHub repo tricks AI coding agents into running malware: An agentic coding tool tasked with running a seemingly benign GitHub repository could execute a ...
bleepingcomputer.com/news/security/clean-github-repo-tricks-ai-coding-agents-into-running-malware/
AI coding agents can be tricked into installing malware via 'clean' GitHub repositories — Mozilla's 0din team shows how Claude Code can be ...
tomshardware.com/tech-industry/cyber-security/ai-coding-agents-can-be-tricked-into-installing-malware-via-clean-github-repositories-mozillas-0din-team-shows-how-claude-code-can-be-exploited-by-its-own-helpfulness
scienspire.com Jun 08
If You Use Claude or Gemini, This Microsoft Breach Means Your Data Is at Risk: The Miasma worm supply chain attack on Microsoft-owned GitHub repositories targets ...
scienspire.com/article/microsoft-breach-ai-code-assistants
dlvr.it May 22
Megalodon chums the waters in 5.5K+ GitHub repo poisonings: Will Jason Statham save us?
theregister.com/security/2026/05/22/megalodon-chums-the-waters-in-55k-github-repo-poisonings/5245342
Hackers breach GitHub and access 3,800 internal repositories now listed for sale: GitHub has said it found about 3,800 internal repositories accessed in the ...
techspot.com/news/112498-hackers-breach-github-malicious-vs-code-extension-access.html
github.com Apr 30
GitHub - warpdotdev/warp: Warp is an agentic development environment, born out of the terminal.
github.com/warpdotdev/warp
GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX: The GlassWorm supply-chain campaign has returned with a new, coordinated attack that ...
bleepingcomputer.com/news/security/glassworm-malware-hits-400-plus-code-repos-on-github-npm-vscode-openvsx/
Next