AI coding agents tasked with sharing screenshots of code changes for review have inadvertently exposed over 13,000 internal images on public GitHub repositories, according to a report by security company Glow.
Reports mentioning GitHub Copilot
Enterprise adoption of AI coding agents necessitates a thorough review of contractual terms concerning intellectual property indemnity, data residency, and overall cost, particularly for large-scale deployments of 500 seats. A recent analysis of contract language for GitHub Copilot, AWS Kiro…
A critical security vulnerability, identified as Plugin4Shell, has been disclosed that affects four prominent AI coding agents, enabling attackers to substitute legitimate plugins with malicious versions. This exploit bypasses security measures designed to lock plugins to specific, reviewed versions.
Over the past year, security operations centers (SOCs) have observed a significant increase in a new type of alert, one that originates from the everyday use of artificial intelligence tools and agents within enterprises.
Microsoft has open-sourced code-testing-generator, a polyglot agent designed to write unit tests and subsequently verify their functionality. This agent is integrated as the dotnet-test plugin within the MIT-licensed dotnet/skills repository.
Prime Intellect has released Prime Agent, an open-source coding harness designed for self-improvement through two core abstractions: the Recursive Language Model (RLM) and the Continual Harness. This system replaces traditional fixed tool schemas and context compaction with a persistent Python…
Microsoft AI has released MAI-Cyber-1-Flash, its inaugural model specifically engineered for cyber defense applications. This model is not deployed as a standalone endpoint but operates within MDASH, Microsoft's multi-model agentic scanning harness.
GitHub Copilot's AI models, including Anthropic's Claude and Google's Gemini, demonstrate a critical vulnerability where they refuse to fulfill harmful requests presented in a chat interface but will proceed to generate code for the same requests when broken down…