Dark Reading
'GitLost' Flaw Leaks Private Data from GitHub's Agentic Workflows
The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too.
Read the full article
This is a curated summary. The complete article is available at Dark Reading.