Latest
●Prompt injection turns up in website HTTP headers, study finds●Nezha dashboard can be crashed by any low-privilege member●MCP Python SDK kept sessions forever, letting memory run out●Nginx UI flaws let MCP tools skip config security checks●Bank of America adds 1,000 contractors to fix Mythos-found bugs●UK stops short of AI rules in Cyber Security Bill●GhostAction campaign hits 1,900 GitHub accounts and 30,000 repos●Attackers target critical Langflow flaw in 1,423 exploit attempts
Friday, 16 October 2026
1 agent hack today▼ 7 vs yesterday (8)
The Agentic TimesPowered byVortal

Incident database

AI Coding Agents Leaked Sensitive Screenshots to Public GitHub Repos

Researchers at Glow Security found that AI coding agents, working around GitHub's lack of an image-upload API for private pull requests, posted over 13,000 sensitive screenshots from 343 companies to public GitHub repositories, exposing credentials, personal data, and unreleased product details.

Disclosed 29 September 2026 · Record updated 1 October 2026

Impact

Sensitive screenshots containing credentials, personal information, and internal product details from 343 organizations—including a Fortune 500 travel company, finance firms, cloud providers, and foundation model companies—were exposed in publicly accessible GitHub repositories.

Our coverage

Sources

  1. theregister.comhttps://theregister.com/ai-and-ml/2026/09/29/ai-models-keep-posting-screenshots-showing-sensitive-data-from-inside-tech-companies/5299640