[SECURITY]■ STORY TIMELINE
GHOSTCOMMIT: HIDDEN IMAGE ATTACK STEALS AI SECRETS
Researchers have demonstrated a new attack called 'Ghostcommit' that hides prompt injections in PNG files to fool AI code reviewers and agents into exposing repository secrets.
Bleeping Computer+0m
A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostco…