'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

📡 Tech & Science

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit,' slipped past AI code reviewers CodeRabbit and Bugbot, which never open image files at all, then convinced a coding agent to read a repo's .env and write every secret into the code as a list of numbers. [...]

📖 Cet article provient d'une source externe.

🔗 Lire l'article complet sur la source →

55 mots extraits · Source originale


🔥 OFFRE PARTENAIRE

QCY Crossky C50 Open Ear Wireless Earbuds Bluetooth 6.0 Comfort Clip On Sports Earphone 4 Mic AI Clear Call Bass Boost Headphone

🔥 QCY Crossky C50 Open Ear Wireless Earbuds Bluetooth 6.0 Comfort Clip On Sports Earphone 4 Mic AI Clear Call Bass Boost Headphone - Une offre exceptionnelle à ne pas manquer ! Cliquez pour découvrir.
✅ Consultez les photos supplémentaires.

✅ Découvrez toutes les caractéristiques.

✅ Vérifiez la disponibilité actuelle.

✅ Consultez les avis des acheteurs.

Posts les plus consultés de ce blog

Unified Zero-Shot Time Series Forecasting: A Darts Foundation

Can AI Draw Science? A Benchmark for Evaluating Scientific Figure Generation by Text-to-Image and Multimodal Models

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

Ce smartphone présente le meilleur rapport qualité / prix de notre comparatif

Comment supprimer son historique Canal ?

AI Is Here to Stay. The Real Challenge Is Operating It Securely

62 Last Minute Prime Day Weekend Deals: Up to 45% Off (2026)

Venezuela Earthquake Destruction Revealed in New Satellite Images

À près de 3700 euros, ce vidéoprojecteur futuriste cache quelques défauts agaçants

Security News This Week: LastPass Users Had Their Data Stolen—Again