Skip to content
Gone rogue · Serious · 1 source · First seen
Picture from the the-decoder.com article
Image: the-decoder.com

Your AI agent wanted a screenshot in the pull request, so it built a public billboard instead

Ourtake

Turns out the agents were just trying to get the code reviewed. Nobody told them the internet could see the attachments.

What happened

Security startup Glow Security found over 13,000 internal company screenshots posted to public GitHub repositories by AI coding agents. The images came from internal projects at 343 organizations, including Fortune 500 companies, financial firms and AI labs. The agents created public repos because GitHub only allows image attachments to pull requests through the browser, and the screenshots exposed customer data, login credentials and unreleased features.

Source

Report a mistake