Microsoft’s Copilot AI assistant is exposing the contents of more than 20,000 private GitHub repositories from companies including Google, Intel, Huawei, PayPal, IBM, Tencent and, ironically, Microsoft.

These repositories, belonging to more than 16,000 organizations, were originally posted to GitHub as public, but were later set to private, often after the developers responsible realized they contained authentication credentials allowing unauthorized access or other types of confidential data. Even months later, however, the private pages remain available in their entirety through Copilot.

AI security firm Lasso discovered the behavior in the second half of 2024. After finding in January that Copilot continued to store private repositories and make them available, Lasso set out to measure how big the problem really was.

Read full article

Comments

Brightcove, a cloud platform that helps businesses manage and monetize video content, is being taken private by Italian technology company Bending Spoons in an all-cash deal valued at $233 million. The transaction prices Brightcove at $4.45 per share, translating to a 90% premium on its 60-day average. Founded out of Boston in 2004, Brightcove develops […]

© 2024 TechCrunch. All rights reserved. For personal use only.