Act
archived
AI Coding Agents Leaked 13,000 Internal Images to Public GitHub Repos
- Engineer — Act: AI coding agents in your dev workflow may be silently pushing screenshots—including sensitive internal data—to public GitHub repos under personal developer accounts. Audit GitHub for AI-agent-created image artifacts now, and restrict AI agent configurations to prevent writing to public repositories.
- SOC/IR — Act: Over 13,000 internal images from 300+ orgs are already publicly reachable on GitHub. Hunt for unexpected image file commits (PNG/JPEG) in developer personal repos linked to your organization’s accounts, and check whether any internal-origin images are indexed publicly.
- Leader — Act: Customer billing records are confirmed among the exposed data, implicating potential GDPR/SEC disclosure obligations. This week, confirm whether your organization is among the 300+ affected by querying your security team for AI agent GitHub activity, and engage legal on exposure scope before regulators or customers surface it first.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.