#gitlost

· 3mo ago

GitLost Attack Exploits GitHub Agentic Workflows Preview 🔗 https://cybersecurefox.com/en/gitlost-github-agentic-workflows-data-leak #gitlost #github #agentic #workflows #ai #agents #prompt #injection #private #repositories

CyberSecureFox

GitLost Attack Exploits GitHub Agentic Workflows Preview

Researchers from Noma Security have demonstrated the GitLost attack technique, which makes it possible to extract the contents of an organization’s private

Sam Stepanyan

🐘 @securestep9@infosec.exchange

· 3mo ago

#AI: GitHub AI allows unauthenticated attackers to pull data from private repositories by posting a crafted GitHub Issue in a public repository. Noma Security research dubbed this prompt injection attack #GitLost: #AISecurity 👇 https://noma.security/blog/gitlost-how-we-tricked-githubs-ai-agent-into-leaking-private-repos/

noma.security

GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos | Noma Security

Noma Labs found a prompt injection flaw in GitHub Agentic Workflows that let an unauthenticated attacker leak private repo data via a crafted GitHub Issue.

You've seen all posts