NewsDark Reading
AI Coding Agents Leak Thousands of Secrets to GitHub
Teaser from the source
A command in Claude Code inadvertently saves files with credentials and other sensitive data to public Git repositories, creating security gaps for organizations.
This is the RSS-feed teaser. Read the full article at the original source.
Read at Dark ReadingMore on GitHub
Other advisories
- HighCVE-2026-125329Kaneo is a project management application with boards, Gantt charts, and GitHub integration that can be self-hosted or used as a cloud service. Prior to 2.13…
- MediumCVE-2026-119976External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose informati…
- MediumCVE-2026-83953Microsoft GitHub Copilot Plugin for JetBrains IDEs: Befehlsinjektion
- MediumCVE-2026-83953Microsoft GitHub Copilot Plugin for JetBrains IDEs: Befehlsinjektion
- MediumCVE-2026-83953Improper neutralization of special elements used in a command ('command injection') in Github Copilot allows an authorized attacker to disclose information l…
- MediumCVE-2026-123369compose-lint: Compose file text can issue GitHub Actions workflow commands through the compose-lint Action
- MediumCVE-2026-123369compose-lint: Compose file text can issue GitHub Actions workflow commands through the compose-lint Action
- MediumCVE-2026-83953GitHub Copilot for Jetbrains Information Disclosure Vulnerability
Other news entries
- Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix ConfirmedNewsThe Hacker News
- Claude Code is accidentally exposing secrets all over GitHubNewsArs Technica — Security
- Tensorlake: attacker reached engineering GitHub via vendor-hosted sandboxes after unrotated env varsBreachpwn.watch
- Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubNewsThe Hacker News
- Agents reveal secrets when offered to team up with each otherNewsThe Register — Security
- Fake security tools on GitHub push backdoors and infostealersNewsBleepingComputer
- Threat actors use agentic AI tooling to find and abuse exposed secretsNewsMicrosoft Threat Intelligence
- Microsoft GitHub Enterprise Server: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
Source: https://www.darkreading.com/cyber-risk/ai-coding-agents-leak-secrets-github
ID