❌

Normal view

Agents hooked into GitHub can steal creds – but Anthropic, Google, and Microsoft haven't warned users

15 April 2026 at 08:01

Researchers who found the flaws scored beer money bounties and warn the problem is probably pervasive

Exclusive Security researchers hijacked three popular AI agents that integrate with GitHub Actions by using a new type of prompt injection attack to steal API keys and access tokens, and the vendors who run agents didn’t disclose the problem.…

Commvault has a Ctrl+Z for rogue AI agents

14 April 2026 at 20:57

The company's new software keeps an eye on your agents and backs up data.

Keep your agents close and your agent-monitoring software closer. Commvault’s new AI Protect can discover and monitor AI agents running inside AWS, Azure, and GCP environments and even roll back their actions when something goes wrong.…

❌