Noma Labs published research on September 9 describing Workflow Identity Hijacking, an AI workflow attack that requires no prompt injection because the identity triggering a workflow is decoupled from…
Anthropic has expanded its voice mode capability to the more powerful Claude Opus and Sonnet models, enabling developers to integrate advanced multimodal conversational AI with real-time voice interac…
Noma Labs researchers demonstrated a prompt injection attack against GitHub's Agentic Workflows, tricking the AI agent into leaking private repository contents as a public comment. The attack bypassed…
The AI Now Institute published a proof-of-concept attack called Friendly Fire that achieves an 85% hit rate against AI coding agents. Researchers Boyan Milanov and Heidy Khlaaf planted a malicious scr…
OpenAI found roughly 30% of SWE-Bench Pro tasks broken, while Cognition announced SWE-1.7 rivaling GPT-5.5, shifting competition from model performance to benchmark control. A new runtime security lay…
A developer demonstrated a prompt injection attack called GitLost against GitHub Agentic Workflows, showing that a single word change in a public issue can trick an AI agent into leaking private repos…
Noma Labs disclosed GitLost, a prompt injection vulnerability in GitHub's Agentic Workflows feature, on July 6, 2026. The attack allows unauthenticated attackers to exfiltrate data from private reposi…
On July 7, Noma Security disclosed a critical prompt injection flaw in GitHub's Agentic Workflows, dubbed GitLost, that allows any free GitHub account to extract private repository contents by posting…
Noma Labs disclosed GitLost, a vulnerability in GitHub Agentic Workflows that allowed an attacker to exfiltrate private repository contents via a crafted public issue. The attack exploited the AI agen…
Noma Labs disclosed a vulnerability called GitLost that exploits GitHub Agentic Workflows via indirect prompt injection, allowing an AI agent to read private repositories and post contents as public i…
Noma Labs discovered a critical prompt injection vulnerability in GitHub's Agentic Workflows, dubbed GitLost, allowing unauthenticated attackers to silently exfiltrate data from private repositories b…
Noma Labs disclosed GitLost, a July 2026 prompt-injection technique that could make GitHub Agentic Workflows leak private repository contents through a public issue comment. The attack exploits an arc…
Security researchers at Noma Security demonstrated the GitLost exploit, which uses indirect prompt injection to trick GitHub Agentic Workflows into exfiltrating private repository data through public …