Encrypted instructions trick Copilot CLI into spilling developer secrets

GitHub Copilot CLI can be made to read sensitive files from a developer’s machine and send their contents to an attacker from a single web page. Security researchers at Adversa AI said the new attack technique, dubbed Cryptographic Context Injection (CCI)…

Preview courtesy of InfoWorld. The full article opens on their site.