GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos
THE SO WHAT
An AI agent leaking private repos is a concrete example of why "agentic" dev tools are a new exfiltration surface, not just productivity boosters. If you're piloting AI agents against code or data, treat them like third-party contractors with least-privilege access and aggressive logging.
READ THE SOURCE
MORE FROM THE WIRE
Applied AIThe great data leakage problem
The shift from "move data to compute" to "bring compute to data" is now a security and governance mandate, not just an architecture preference. If you're building AI features on sensitive data, start evaluating in-database compute, federated approaches, and strict egress controls before regulators do it for you.
Applied AISources: Meta is testing AI glasses that continuously record audio and take photos every few seconds, letting users query or recall what they saw or heard
Continuously recording AI glasses move "lifelogging" from experiment to potential consumer product—and reopen the privacy battles of the smartphone era in a more ambient form. Any company with physical locations or frontline staff should start drafting policies for always-on sensors worn by customers and employees.
Applied AINvidia and AI chip startup d-Matrix are combining their hardware in a new system to power AI models, the latest example of Nvidia partnering with rivals
Nvidia partnering with d-Matrix on a combined system per The Information is a clear tell—heterogeneous AI compute is going mainstream, and Nvidia would rather orchestrate it than fight every rival. Infra buyers should plan for mixed-accelerator racks and negotiate for software and tooling that make multi-vendor deployments first-class, not bespoke.
Applied AIGPT-5.6 Sol, along with Terra and Luna, will launch publicly this Thursday
A public launch of GPT-5.6 Sol plus Terra and Luna means the model cadence is now measured in quarters, not years. Teams building on proprietary LLMs need an explicit upgrade strategy—what gets revalidated, what stays pinned, and how you manage regression risk with each new release.