AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said. Its researchers found more than 13,000 internal images from developers at over 300 organizations, including customer billing records and screens of features not yet released. In most cases, they sat under developers' personal accounts
AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub
About this summary. This is a short, independently written summary of an article first published by The Hacker News. Cyber Security News did not report or verify the underlying story. Read the original: https://thehackernews.com/2026/09/ai-coding-agents-exposed-13000-internal.html
Source attribution: headline and facts are from The Hacker News (thehackernews.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
AI coding agents leaked 13,000 internal company screenshots to public GitHub repos
When developers ask AI coding agents to prove that a user interface fix works, some agents have been posting the evidence where anyone can find it, according to Glow…
Re: JIT buffer overflow fixed in libpcre2-10.49
Posted by Gabriel Ravier on Sep 30 I believe that `gh api repos/PCRE2Project/pcre2/security-advisories/GHSA-r9hj-j2rw-4q3m --jq .description` would give you the…
MMSkillRisk: Can Agents Stay Safe When Multimodal Skills Become Traps?
arXiv:2609.35912v1 Announce Type: new Abstract: Agent skills are shareable packages of procedural instructions, tools, and examples. Multimodal skills additionally…
WSL containers are generally available on Windows
Microsoft made WSL containers generally available and shipped the feature with controls that let administrators switch it off or limit where it pulls images from. WSL…
AI models keep posting screenshots showing sensitive data from inside tech companies
Amid the growing concern about AI models escaping security simulations to hack websites comes word that these "superintelligent" blobs of code have no understanding of…
The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub
See how the Blue Agent investigated a multi-platform attack in minutes, following evidence across AWS and GitHub to uncover compromised credentials, stolen source code…