🧰 GitHub Copilot CLI

The items that name it 18

• IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
  articleas classification.technologies2026-10-29
• Secret protection must scale with software
  articleas classification.technologies2026-10-07
• GitHub Copilot CLI vulnerability: Cryptographic Context Injection steals developer secrets
  writeupas affected products2026-10-06

  Coding agent product; in autopilot mode can be induced to read local files (e.g. .env.prod) and exfiltrate them to an attacker endpoint via the Cryptographic Context Injection technique. Finding reported to GitHub's bug bounty program on September 17, 2026; as of October 1, 2026 GitHub validated the

• Top 10 attacks on Claude Code and what each one actually broke
  writeupas affected products2026-09-23

  Affected by SymJack symlink config hijack exploit.

• leepokai/jev-guard
  toolas affected products2026-09-17It is written here as GitHub Copilot CLI (supported agent).

  supported agent

• AI Agent Hacking Writeups
  repoas affected products2026-09-17
• Uber ADR (Agentic AI Detection and Response)
  repoas affected products2026-08-21

  employee-facing AI agent secured by ADR

• Grok chat history leak: Cryptographic Context Injection
  writeupas classification.technologies2026-08-20
• Critical Security Controls for Governing AI Coding Agents | Blog | Endor Labs
  articleas classification.technologies2026-07-31
• When Your AI Reviewer Works for the Attacker: A Confused-Deputy Bug in Microsoft
  writeupas tools2026-07-21

  Coding agent used to validate the proof-of-concept attack

• AI Security Briefing
  writeupas affected products2026-07-18

  Closed-source agent, out of scope for direct testing; cited as affected by the TrustFall finding

• Destructive Command Guard (dcg)
  repoas affected products2026-07-15

  Supported AI coding agent hook target

• HOL Guard
  repoas affected products2026-07-15
• GitHub Secure Code Game
  courseas tools2026-07-04

  AI coding assistant cited as inspiration for ProdBot's natural-language-to-bash-command functionality

• GitHub Secret Scanning MCP Server
  articleas tools2026-05-11

  MCP-compatible AI coding agent used to run secret scanning via GitHub MCP server

• GitHub Dependency Scanning MCP Server
  toolas affected products2026-05-11
• TrustFall: 1-click coding agent RCE in Claude, Cursor, Copilot
  writeupas affected products2026-05-07
• Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers
  articleas affected products

  Arbitrary code execution via search order hijacking

In every workspace you can read 24