Indirect Prompt Injection Exploits GitHub's AI Agent to Leak Private Repository Data

Sergio De Simone — Thu, 23 Jul 2026 20:00:00 GMT

GitLost is a prompt-injection exploit discovered by Noma Security that tricks GitHub's new Agentic Workflows into leaking private data. By embedding concealed instructions within public GitHub issues, attackers can circumvent security safeguards and induce AI agents to reveal confidential information in public comments.

By Sergio De Simone

Expedia Uses AI-Driven Service Telemetry Analyzer to Accelerate Incident Investigation

Leela Kumili — Thu, 23 Jul 2026 14:15:00 GMT

Expedia Group has introduced STAR, an internal AI-assisted observability platform that helps engineers investigate production incidents using service telemetry and LLMs. Built with FastAPI, Datadog, Celery, Redis, and Langfuse, STAR follows structured workflows to analyze telemetry, generate root cause assessments, and support incident response while keeping engineers in the loop.

By Leela Kumili

InfoQ - Prompt Engineering - News

Indirect Prompt Injection Exploits GitHub's AI Agent to Leak Private Repository Data

Expedia Uses AI-Driven Service Telemetry Analyzer to Accelerate Incident Investigation