Prompt Injection Flaw in GitHub Actions Hits Fortune 500 Firms

A new class of prompt injection vulnerabilities, dubbed “PromptPwnd,” has been uncovered by cybersecurity firm Aikido Security. The flaws affect GitHub Actions and GitLab CI/CD pipelines that are integrated with AI agents, including Google’s Gemini CLI, Claude Code, and OpenAI Codex. The vulnerability has been confirmed to impact at least five Fortune 500 companies, with […]

The post Prompt Injection Flaw in GitHub Actions Hits Fortune 500 Firms appeared first on Cyber Security News.

This article has been indexed from Cyber Security News

Read the original article: