Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-02-25 · source-backed
Orca Security discovered "RoguePilot" — a passive prompt injection attack where malicious instructions hidden in GitHub Issues via HTML comment tags are automatically fed to GitHub Copilot when a developer opens a Codespace. The injected prompt exfiltrates the GITHUB_TOKEN, enabling full repository takeover with read/write access. This is a new class of AI-mediated supply chain attack — the coding assistant is weaponized against the developer it assists. GitHub has patched following coordinated disclosure. Action: Audit any workflow where AI agents process untrusted content (issues, comments, PRs) as execution context. (The Hacker News, SecurityWeek)
Each link below shares sources, entities, or timing with this story.
GitHub Copilot uses Claude Opus / Shared entities / Same source domain / Shared topic / What happened next / Tension
Linked by a graph relationship (GitHub Copilot uses Claude Opus); both cover HTML, PRs, The Hacker News; reported by the same outlet (thehackernews.com).
GitHub Copilot uses GitHub Actions / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (GitHub Copilot uses GitHub Actions); both cover GitHub, HTML, PRs; reported by the same outlet (securityweek.com).
GitHub Copilot uses Claude / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (GitHub Copilot uses Claude); both cover GitHub, HTML, SecurityWeek; reported by the same outlet (securityweek.com).
GitHub Copilot uses Claude / Shared entities / Shared topic / What happened next
Linked by a graph relationship (GitHub Copilot uses Claude); both cover GitHub, SecurityWeek; overlapping topics (access, action, against, agent, attack).
Cursor competes with GitHub Copilot / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Cursor competes with GitHub Copilot); both cover Audit, GitHub Copilot; overlapping topics (access, agent, attack, audit, copilot).
GitHub Copilot uses Claude / Shared entities / Same source domain / Shared topic / What happened next
Linked by a graph relationship (GitHub Copilot uses Claude); both cover Action, The Hacker News; reported by the same outlet (thehackernews.com).
GitHub Copilot supports JetBrains / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (GitHub Copilot supports JetBrains); both cover GitHub, GitHub Copilot; overlapping topics (access, agent, copilot).
Cursor competes with GitHub Copilot / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Cursor competes with GitHub Copilot); both cover GitHub, GitHub Copilot; overlapping topics (action, agent, copilot, developer).