Remote Prompt Injection in Gitlab Duo Leads to Source Code Theft(legitsecurity.com)181 points by chillax 1 year ago | 31 comments
Public secrets exposure leads to supply chain attack on GitHub CodeQL(praetorian.com)285 points by cyberbender 1 year ago | 53 comments
GitHub Copilot CLI downloads and executes malware(promptarmor.com)43 points by sarelta 8 months ago | 12 comments
Did DORA's last update create an encryption loophole?(evervault.com)12 points by chickie2 2 years ago | 7 comments
Exposed GitHub repos, now private, can be accessed through Copilot(techcrunch.com)9 points by mraniki 1 year ago | 1 comments
Accessing private GitHub repositories via MCP(invariantlabs.ai)98 points by gokhan 1 year ago | 25 comments