AI coding agents have been creating public GitHub repos on their own to post internal company screenshots

I work at Glow, and our Glow Labs research team just published this. Developers asked their coding agents to share screenshots of their work for code review. Some agents decided on their own to create a brand-new public repo, usually under the developer’s personal account, and put the screenshots there. The team found 13k+ images across 300+ organizations, including a frontier AI lab and a Fortune 500 travel company. They show billing records, a financial firm’s treasury console, and features weeks or months from release. Since these repos weren’t in the companies’ own GitHub orgs, security teams never saw them. Affected orgs have been notified. The writeup covers why the agents did this and where to look: https://glow.io/blogs/how-ai-agents-exposed-developer-screenshots-from-leading-tech-companies submitted by /u/Fit-Management2067 [link] [comments]Technical Information Security Content & DiscussionRead More