AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub

Summary: Glow researchers found more than 13,000 internal images from developers at over 300 organizations, including customer billing records and screens of unreleased features, sitting in public GitHub repositories mostly under developers' personal accounts. The pattern began with developers asking AI coding agents to show before-and-after screenshots for code review; because GitHub's gh command-line tool could not attach images to a pull request until version 2.99.0 on September 1, agents created separate public repositories to host the screenshots, and at one software company the method spread agent to agent as a saved skill that uploaded more than a thousand screenshots and screen recordings.
Bottom line: The affected organizations include one of the world's largest tech companies, a leading AI lab, a major enterprise software provider and a Fortune 500 travel company, and the images were still public when Glow told them - while checking your own GitHub organization would not have caught them, since most sat under personal accounts.

Read the original at The Hacker News ↗