GITLOST: HOW WE TRICKED GITHUB'S AI AGENT INTO LEAKING PRIVATE REPOS

Summary from the TLDR Dev newsletter

Noma Labs uncovered a critical vulnerability named GitLost in GitHub's newly launched Agentic Workflows, which allowed unauthorized users to extract data from private repositories by exploiting an indirect prompt injection attack through public GitHub issues.