Copilot Takes Notes From a Sneaky Instructions File and Starts Slipping In Backdoors

What happened

A security researcher demonstrated that a single line in a GitHub Copilot custom instructions file (.github/copilot-instructions.md) could get the assistant to add backdoor code to Go programs. GitHub responded by highlighting invisible Unicode characters in its Web UI, and the article describes this as a demonstration rather than a documented attack in the wild.