Noma Labs researchers have identified an AI attack technique called "workflow identity hijacking" that lets unauthenticated users trigger privileged enterprise workflows and access systems, according …
Noma Labs published research on September 9 describing Workflow Identity Hijacking, an AI workflow attack that requires no prompt injection because the identity triggering a workflow is decoupled from…
Security researchers at Noma Labs disclosed a prompt injection vulnerability called GitLost that exploits GitHub Agentic Workflows. By adding a single connector word like 'Additionally' to a prompt, a…
Noma Labs researchers demonstrated a prompt injection attack against GitHub's Agentic Workflows, tricking the AI agent into leaking private repository contents as a public comment. The attack bypassed…
Noma Labs disclosed GitLost, a prompt injection vulnerability in GitHub's Agentic Workflows feature, on July 6, 2026. The attack allows unauthenticated attackers to exfiltrate data from private reposi…
Noma Labs researcher Sasi Levi disclosed a prompt-injection vulnerability called GitLost that allows attackers to trick GitHub's Agentic Workflows AI agent into reading private repository data and pos…
Security firm Noma Labs discovered a prompt injection vulnerability, named GitLost, in GitHub's Agentic Workflows that allows attackers to trick the AI agent into leaking private repository contents i…
Noma Labs disclosed GitLost, a vulnerability in GitHub Agentic Workflows that allowed an attacker to exfiltrate private repository contents via a crafted public issue. The attack exploited the AI agen…
Noma Labs disclosed a vulnerability called GitLost that exploits GitHub Agentic Workflows via indirect prompt injection, allowing an AI agent to read private repositories and post contents as public i…
Noma Labs discovered a critical prompt injection vulnerability in GitHub's Agentic Workflows, dubbed GitLost, allowing unauthenticated attackers to silently exfiltrate data from private repositories b…
Security researchers at Noma Labs discovered a prompt injection vulnerability in GitHub's Agentic Workflows, dubbed GitLost, that allows attackers to trick AI agents into leaking private repository da…
Noma Labs disclosed GitLost, a July 2026 prompt-injection technique that could make GitHub Agentic Workflows leak private repository contents through a public issue comment. The attack exploits an arc…