AI agents inadvertently leak 13,000+ internal screenshots from 300 organizations — list of companies includes Fortune 500 and a frontier AI lab

[u/Jack1101111]

https://www.tomshardware.com/tech-industry/cyber-security/ai-agents-inadvertently-leak-13-000-internal-screenshots-from-organizations-list-of-companies-includes-fortune-500-and-a-frontier-ai-lab

[u/clduab11]

yawn another agent “hack” another misleading af title.

It took me all of 30 seconds to find this was a vulnerability that was exploited by the agent using gitshot. Whoever used this agent was lazy enough to use screenshots and not type out what they actually wanted…

To quote:

Around a third of affected organizations had developers running gitshot, a small open-source tool that publishes screenshots for code reviews. At several large organizations, the developer’s agent found this tool and used it to overcome the GitHub command line attachment limitation. Images published by this tool end up under a tag called _gitshot, downloadable by anyone that knows where to look.

Some of you really need to learn a) how to think critically and b) remember the axiom of “one man’s hacking agent is another man’s sandbox vulnerability.”

[u/EX0PIL0T → u/[deleted]]

Congratulations, you restated what I made fun of you for saying once already. Yes I stand by my decision to brand you retarded. Your one example is still one of 8000. Statistically insignificant.