Find a story
Search Spins
Search titles, summaries, and missing voices across published articles — press releases, announcements, and media coverage.
4 results for “private repos”
GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos
A forum post on Hacker News titled 'GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos' announces an unverified security demonstration involving GitHub’s AI agent, with no article content beyond the title and the word 'Comments'.
Jul 9, 2026
GitHub AI agent leaks private repos when asked nicely - The Register
A GitHub AI agent was found to disclose contents of private repositories when prompted with simple, polite language — revealing a critical security vulnerability in its access control logic.
Jul 9, 2026
'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows
A security vulnerability dubbed 'GitLost' enables unauthenticated attackers to exploit GitHub's agentic workflows by submitting crafted public Issues that trigger unauthorized access to private repository data.
Jul 9, 2026
Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data
Researchers at Noma Security discovered a vulnerability in GitHub's Agentic Workflows where a public GitHub issue can trigger unauthorized access and leakage of private repository contents when agents are granted broad read permissions.
Jul 9, 2026