GitHub AI agent leaks private repos when asked nicely
Sintesi redazionale: Per usual, there's no fix - or even any documentation - for GitLost. Fonte originale: https://www.theregister.com/security/2026/07/07/github-ai-agent-leaks-private-repos-when-asked-nicely/5267924
<p>### MOST POPULAR</p><p>### AI</p><p>-<br>AI and ML</p><p>#### South Korean chip startup FuriosaAI invades European datacenters</p><p>RNGD accelerators land in Equinix's Lisbon DCs</p><p>-<br>AI and ML</p><p>#### Enterprise AI still smarting from leaping before looking</p><p>Majority report AI-related security incidents or vulnerabilities</p><p>-<br>Science</p><p>#### Boffins bet on quantum computers, AI supers to solve fusion fuel dilemma</p><p>Department of Energy, Cleveland Clinic, and IBM simulate a soup of molten salts and techno babble in pursuit of tritium</p><p>-<br>AI and ML</p><p>#### Software engineers can still rake in big bucks by working for fast-growing companies</p><p>AI's impact on tech business is complicated</p><p>-<br>software</p><p>#### Microsoft says the world is changing faster than it can keep up as it guts commercial, Xbox teams</p><p>Xbox chief says company can't afford to mistake longevity for inevitability</p><p>### Infosec</p><p>-<br>Security</p><p>#### Russians are posing as Signal support to launch phishing attacks</p><p>PLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!</p><p>-<br>Security</p><p>#### Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack</p><p>PLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more</p><p>-<br>Black Hat and DEF CON</p><p>#### DEF CON Franklin project enlists hackers to harden critical infrastructure</p><p>Voting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included</p><p>-<br>Security</p><p>#### EQT buys majority share in Swiss cybersecurity biz Acronis</p><p>Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified</p><p>-<br>Malware Month</p><p>#### Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight</p><p>On the plus side, infosec's a good bet for a long, stable career</p><p>### FOSS</p><p>-<br>#### Collabora releases CODE 26.04 as rivalry between FOSS cloudy office suites heats up</p><p>Now with Markdown support and smarter formula error handling – plus integrated AI, though it's off by default</p><p>-<br>#### Blast from the past as GIMP 0.54 is revived in Flatpak form</p><p>Retro-computing fun for the nostalgic with first (and last) release to use Motif instead of GTK</p><p>-<br>#### Bcachefs exits experimental status in new 'performance release'</p><p>More Rust, but more trouble with AI slop, too</p><p>-<br>#### France's digital sovereignty push is struggling to escape the Microsoft gravity well</p><p>Nextcloud rollout shows locally controlled storage is one thing; getting users off Office is quite another</p><p>-<br>#### History of CentOS: How a biochemist's Linux hobby project became the enterprise world's default operating system</p><p>When a community came together after Red Hat said Windows was 'probably the right product'</p><p>-<br>#### Netflix wiz creates app to slash AI bills, then open sources it</p><p>Project Headroom could save you big money, too</p>