Researchers show HalluSquatting can make AI coding agents fetch fake repositories or skills and run attacker-supplied code.
A prompt injection attack can trick GitHub’s preview Agentic Workflows into retrieving content from private repositories and ...
A critical prompt injection vulnerability in GitHub Agentic Workflows could allow unauthenticated attackers to leak private repository data, ...
In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are ...
The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data ...
Zscaler found attackers using SEO poisoning and hidden prompts in malicious websites to manipulate AI agents into making cryptocurrency payments.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results