‘GitLost’: researchers tricked GitHub’s AI agent into leaking private repos

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization's private repositories, researchers at Noma Security have shown. The attacker needs only to open a normal-looking issue on a public repository, with no stolen credentials and no access to the organization. If that organization has given the agent read access across its repositories, private ones

GitHub AI agent leaks private repos when asked nicely

Per usual, there's no fix - or even any documentation - for GitLost

Companies discover AI is expensive when employees actually use it

The artificial intelligence revolution has reached the point where management begs employees to stop feeding PDFs into the robot so it can burp out PowerPoint decks nobody wanted in the first place. The entire AI bubble is built on the idea that someday, somehow, customers will pay for the insane costs of using AI. — Read the rest The post Companies discover AI is expensive when employees actually use it appeared first on Boing Boing.

AI Is Forcing Banks to Rebuild Their Entire Cyber Architecture

Artificial intelligence is forcing financial institutions to rethink the foundations of cybersecurity as increasingly sophisticated AI-generated fraud exposes the limitations of traditional security systems. While deepfakes have dominated public attention, banking executives and cybersecurity specialists say the real challenge extends far beyond manipulated videos or cloned voices. Instead, AI is changing how financial institutions approach []

Brokerages Are Racing To Adopt AI. Costs And Headaches Are On The Rise

Artificial intelligence is the No. 1 buzzword in business, and it's no different in commercial real estate, where transaction specialists are being pushed to reinvent how they work. As firms race to weave AI into their operations, some have integrated...