GitHub AI agent leaks private repos when asked nicely

The Register
Jul 7, 2026, 3:49 pm104 pts
Malicious prompters could easily trick GitHub agents into pulling data from private repositories and then leaking the information as a public comment for anyone to access, according to Noma Labs researchers who named the vulnerability GitLost. The issue exists in GitHub’s Agentic Workflows, which allow an AI…

Read Article Share
Share Article
- email
- x.com
- facebook
- pocket
- reddit
- tumblr
- linkedin
- pinterest

Trending Today on Tech News Tube

Natural raises $30M to reinvent payments for AI agents — and take on Stripe

TechCrunch

Natural raises $30M to reinvent payments for AI agents — and take on Stripe 128

Gritt exits stealth with $34 million for robots to build solar plants—then, everything else

TechCrunch

Gritt exits stealth with $34 million for robots to build solar plants—then, everything else 126

Samsung keeps High-NA EUV rollout cautious as foundry profitability remains the focus

Digitimes

Samsung keeps High-NA EUV rollout cautious as foundry profitability remains the focus 125

TaiSol expects server revenue to top 50% in 2H26, liquid cooling to exceed 25% for full year

Digitimes

TaiSol expects server revenue to top 50% in 2H26, liquid cooling to exceed 25% for full year 124

An Apple 'Find My' mystery keeps sending strangers to a Reddit user's house in search of lost iPhones —here's what's likely happening

TechRadar

An Apple 'Find My' mystery keeps sending strangers to a Reddit user's house in search of lost iPhones —here's what's likely happening 118

Head of US Safety Agency Resigns

Slashdot

Head of US Safety Agency Resigns 116

Kapwing AI video editor review

TechRadar

Kapwing AI video editor review 116

Google launches a cheaper alternative to large AI security models like Mythos

The Verge

Google launches a cheaper alternative to large AI security models like Mythos 114

About Tech News Tube

Tech News Tube is a real time news feed of the latest technology news headlines.

Follow all of the top tech sites in one place, on the web or your mobile device.

Featured

Anthropic’s $1.5 billion book piracy…

Anthropic’s $1.5 billion book piracy settlement approved by judge

Agentic AI in the enterprise: Why…

Agentic AI in the enterprise: Why architecture matters more than marketing…

PC modder bolts 5.5-pound aluminum…

PC modder bolts 5.5-pound aluminum heatsink to RTX 4060 — convection-only…

A Device Hidden in Cars Across the US…

A Device Hidden in Cars Across the US Leaves Them Vulnerable to Hacking and…

Scalding hot AI accelerators have put…

Scalding hot AI accelerators have put datacenters in hot water. Two-phase…

The Army Is Burning Through Its AI…

The Army Is Burning Through Its AI Tokens

Nvidia's new Synthetic Video Detector…

Nvidia's new Synthetic Video Detector can identify fake AI videos with up to 92%…

South Korea bets $540bn on a southwest…

South Korea bets $540bn on a southwest chip hub the grid cannot yet feed

Some Mullvad VPN customers tunnel for…

Some Mullvad VPN customers tunnel for exit after co-founder donates millions to…

Judge approves Anthropic's…

Judge approves Anthropic's record-breaking $1.5 billion settlement for AI…