'I'm not a programmer' anymore: Linus Torvalds on the only two tools he uses now

At the Open Source Summit in Mumbai, Torvalds discusses the pain and power of AI in the kernel, and why Linux no longer ...
SecurityWeek

Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection

A critical prompt injection vulnerability in GitHub Agentic Workflows could allow unauthenticated attackers to leak private repository data, ...
CSO Online

GitHub AI agent leaks private repositories via prompt injection attack

A prompt injection attack can trick GitHub’s preview Agentic Workflows into retrieving content from private repositories and ...
The Next Web

‘GitLost’: researchers tricked GitHub’s AI agent into leaking private repos

Noma Labs tricked GitHub's AI agent into leaking private repositories with a crafted issue. The prompt-injection flaw, GitLost, has no code fix.
winbuzzer.com

GitHub Actions Flaw Lets Pull Requests Reach Secrets and CI/CD Tokens

Novee Security has disclosed a critical supply chain flaw it calls Cordyceps. It describes a GitHub Actions workflow-automation pattern that can let low-trust pull request activity reach high-trust CI ...