Researchers say prompt injection attacks could be used to manipulate AI coding agents into accessing sensitive credentials stored in software development pipelines. Microsoft says this could put GitHub-related secrets at risk if the agent is directed to handle them improperly.
Researchers say prompt injection attacks could be used to manipulate AI coding agents into accessing sensitive credentials stored in software development pipelines. Microsoft says this could put GitHub-related secrets at risk if the agent is directed to handle them improperly.
According to the researchers, an attacker could use crafted prompts to persuade the agent to access sensitive credentials stored in development pipelines. Those credentials may be exposed if the AI system is allowed to interact with tools or files containing privileged information.
Microsoft has warned that a vulnerability affecting Anthropic’s Claude Code could allow attackers to steal credentials from software development environments, including secrets tied to GitHub workflows. The issue centers on prompt injection, a technique that can manipulate AI coding agents into following malicious instructions.
According to the researchers, an attacker could use crafted prompts to persuade the agent to access sensitive credentials stored in development pipelines. Those credentials may be exposed if the AI system is allowed to interact with tools or files containing privileged information.
The warning highlights a broader security risk for teams using AI coding assistants in software development. While these tools can help automate tasks, they can also become a pathway to sensitive data if they are not properly restricted and monitored.
The report underscores the need for careful controls around agent permissions, access to secrets, and pipeline security when using AI coding tools. Microsoft’s findings focus on the potential for prompt injection to turn an assistance feature into a credential exposure risk.
Keep exploring
Bitget plans to exit the Japanese market and close all remaining positions by the end of the year. The move adds to ongoing shifts among crypto companies navigating Japan’s regulatory environment.
Read
CoinDesk’s State of Crypto coverage counts down recent developments shaping the crypto policy and market landscape. The report frames these changes as important for how companies and participants navigate the sector.
Read
Strategy said it is holding the dividend on its STRC preferred stock at 12%. The decision keeps the payout unchanged for investors in the company’s yield-focused security.
Read