Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

Prompt injection engineering for attackers: Exploiting GitHub Copilot

Summary

Trail of Bits demonstrates a prompt injection exploit against GitHub Copilot's coding agent, where a crafted GitHub issue tricks Copilot into inserting a hidden backdoor in its pull request.
Published
Collected

original ↗

Related coverage

back