🎯 Out-of-band data exfiltration

The items that name it 2

• Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR
  writeup2026-08-17

  Crafted issue title payload exfiltrated Jira credentials via an out-of-band callback to a listener, receiving base64-encoded credentials from a GitHub Actions runner (Azure IP 20.106.182.197)

• XBOW: A Shell Is Worth a Thousand Images
  writeup2026-08-08It is written here as Out-of-band (OOB) data exfiltration.

  Command output (id, systeminfo, ipconfig /all, whoami /all, directory listings) sent via curl POST to an attacker-controlled collector endpoint, since the front-end HTTP response gave no visible output.