Incident ResponseCISA shares postmortem of GitHub credential leakLaura FrenchJuly 10, 2026CISA credentials and code were uploaded to a public repository on a contractor’s personal GitHub account in May.
AI/ML‘GhostApproval’ technique leads AI coding tools to alter files outside of sandboxLaura FrenchJuly 9, 2026The technique abuses symlinks to escape the intended workspace and weaken human-in-the-loop protections.
AI/ML‘GitLost’ prompt injection leaks private repos via GitHub Agentic WorkflowsLaura FrenchJuly 8, 2026An issue opened on a public repository can lead the agent to disclose private details.
