LOWVulnerability
Global

AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

·Source: The Hacker News

Updated:

Executive Summary

AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said. Its researchers found more than 13,000 internal images from developers at over 300 organizations, including customer billing records and screens of features not yet released. In most cases, they sat under developers' personal accounts

Analysis

AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said. Its researchers found more than 13,000 internal images from developers at over 300 organizations, including customer billing records and screens of features not yet released. In most cases, they sat under developers' personal accounts
Source Attribution

Originally published by The Hacker News on Sep 30, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Zero Trust Creator Says Model Holds Firm Against AI-Assisted Attacks

Fifteen years after coining the framework, John Kindervag insists zero trust still works in the AI era—if you get the implementation right. The post Zero Trust Creator Says Model Holds Firm Against AI-Assisted Attacks appeared first on SecurityWeek .

SecurityWeek
MEDIUMVulnerabilityNEW

Sibos 2026: Don't just think tech, think talent to achieve broad AI literacy

It’s not just the tech banks need to think about. The talent that is needed to make most organisational AI aspirations a reality is a huge part of the successful AI adoption — per an expert panel at the 2026 Sibos conference in Miami.

Finextra
CRITICALVulnerability

NVD CRITICAL: CVE-2026-96659 — A flaw was found in Foreman. This vulnerability allows an authenticated user wit...

A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root passwords. Furthermore, under insecure system configurations where Safemode protections are disabled, the flaw

CVE-2026-96659
NIST NVD