A hidden line in a public GitHub issue turned the platform's own AI agent into a private-repo leak, and the industry spent the same week handing agents more access, not less

The value in AI keeps sliding off the model into the systems around it, and this week the risk followed. Researchers at Noma Security dubbed it GitLost: a plain-English command hidden in a public GitHub issue turned the platform's own AI agent, which held read access to private repos, into a data-exfiltration tool that posted private code as a public comment. The bypass was the word "Additionally." An agent's context window is its attack surface. Plus Prime Intellect's $130M to put agents in every enterprise, Mistral's RGB-only robot-navigation model, OpenAI's live voice models, and Apple's $30B Broadcom chip pledge.