ROGUEPILOT FLAW IN GITHUB CODESPACES ENABLED COPILOT TO LEAK GITHUB_TOKEN

Summary from the TLDR InfoSec newsletter

RoguePilot is a GitHub Codespaces flaw where hidden prompt injections in issues silently hijack Copilot, exfiltrating privileged GITHUB_TOKENs and enabling AI‑mediated supply-chain attacks.