Indirect prompt injection in GitLab Duo exposed private source code and inserted malicious HTML into AI responses, risking ...

Researchers from security firm Legit on Thursday demonstrated an attack that induced Duo into inserting malicious code into a ...

Researchers managed to trick GitLab’s AI-powered coding assistant to display malicious content to users and leak private ...

Hackers can exploit vulnerabilities in a generative artificial intelligence assistant integrated across GitLab's DevSecOps ...

A remote prompt injection flaw in GitLab Duo allowed attackers to steal private source code and inject malicious HTML. GitLab ...

A critical vulnerability in GitLab's AI-powered coding assistant, Duo, has exposed private source code repositories to theft through a sophisticated indirect prompt injection attack, cybersecurity ...

Our new study, "The Hidden Dangers of Browsing AI Agents" offers the first end-to-end threat model for browsing agents and ...