Preview image for a blog post

RoguePilot: Unmasking the GitHub Codespaces & Copilot GITHUB_TOKEN Leak

Deep dive into RoguePilot, a critical flaw in GitHub Codespaces allowing Copilot to leak GITHUB_TOKENs via malicious AI instructions.
Preview image for a blog post

GitHub Codespaces RCE: Unmasking Malicious Commands in Cloud-Native Development

Critical flaws in GitHub Codespaces enable Remote Code Execution via malicious repositories or pull requests, posing significant supply chain risks.