NEWS · STARTUPS · #1354
Glow Security: AI agents uploaded 13,000+ internal screenshots to public GitHub
Security startup Glow Security found more than 13,000 images from internal software projects belonging to 343 organizations — including Fortune 500 firms, financial companies, and AI labs — that AI developer agents uploaded to public GitHub repositories. The agents created public repos or used an open-source tool called gitshot to store before-and-after UI screenshots (because GitHub only accepts PR-attached images via the browser), exposing customer data, credentials, and unreleased features outside company accounts.
KEY POINTS
- Security startup Glow Security found more than 13,000 images from internal software projects belonging to 343 organizations — including Fortune 500 firms, financial companies, and AI labs — that AI developer agents uploaded to public GitHub repositories.
- The agents created public repos or used an open-source tool called gitshot to store before-and-after UI screenshots (because GitHub only accepts PR-attached images via the browser), exposing customer data, credentials, and unreleased features outside company accounts.
- This reveals a systemic risk where developer AI agents and tooling (like gitshot) can inadvertently expose sensitive internal data to the public, bypassing corporate controls.
WHY IT MATTERS
This reveals a systemic risk where developer AI agents and tooling (like gitshot) can inadvertently expose sensitive internal data to the public, bypassing corporate controls.