Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-19 · source-backed
VentureBeat reports three coding agents leaked secrets via a single injection, and one vendor's system card had predicted exactly this runtime failure. The argument: allowlisting and static review miss injection that weaponizes the agent's own permitted actions. Treat coding-agent execution environments as untrusted and instrument them at runtime, not just at the prompt boundary. This is the same structural failure as the Copilot case. The vector is patchable, the agent's permitted blast radius is not.
Each link below shares sources, entities, or timing with this story.
Microsoft released Copilot / Shared entity: VentureBeat / Same source domain / Shared topic / Downstream implication
Linked by a graph relationship (Microsoft released Copilot); both cover VentureBeat; reported by the same outlet (venturebeat.com).
Microsoft released Copilot / Shared entity: VentureBeat / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Microsoft released Copilot); both cover VentureBeat; reported by the same outlet (venturebeat.com).
VS Code uses Copilot / Shared entity: Copilot / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (VS Code uses Copilot); both cover Copilot; overlapping topics (agent, copilot, prompt).
Linked by a graph relationship (VS Code uses Copilot); both cover Copilot; overlapping topics (agent, coding, copilot).
Microsoft released Copilot / Shared entity: Copilot / Shared topic / What happened next / Tension
Linked by a graph relationship (Microsoft released Copilot); both cover Copilot; overlapping topics (agent, copilot).
VS Code uses Copilot / Shared entity: Copilot / Shared topic / What happened next / Tension
Linked by a graph relationship (VS Code uses Copilot); both cover Copilot; overlapping topics (agent, coding).
Linked by a graph relationship (VS Code uses Copilot); both cover Copilot; overlapping topics (agent, copilot).
Microsoft released Copilot / Shared entity: Copilot / Shared topic / What happened next
Linked by a graph relationship (Microsoft released Copilot); both cover Copilot; overlapping topics (agent, copilot, failure).