Research

Zombie instructions on carefully constructed web pages could trick GitHub Copilot CLI into sharing secrets

Why it matters: Researchers found that crafted web pages can plant hidden instructions that make GitHub Copilot CLI running in autopilot mode expose secrets, so review autopilot use and untrusted page access.

Covered by 1 outlet

  • The Register - Zombie instructions on carefully constructed web pages could trick GitHub Copilot CLI into sharing secrets ()

Published

Start with real signal

See your security surface before you subscribe.

Run the complete AYAsec workflow on Free, then move to the cadence your team needs.

Start scanning free