Feb 26, 2025Confirmed
Microsoft Copilot served code and secrets from 20,000 GitHub repos that had since been made private
Rogue: Went past its accessAI loose in the worldData exfiltrationDERIVED
Approved by person, Oct 11, 2026. How entries are approved
Lasso Security found that Microsoft Copilot could return content from 20,580 GitHub repositories across 16,290 organizations that had been public briefly in 2024 and were later deleted or made private, including more than 300 private tokens, keys and secrets and internal packages. Microsoft rated the issue low severity and removed Bing's cached-link feature in December 2024, but Lasso retested on January 14, 2025 and found Copilot still had access to the cached data.
What this means for youAnything that touches the public internet even briefly can be absorbed by an AI tool and resurface later, so rotate any key or credential that was ever exposed.
Sources
- TechCrunchhttps://techcrunch.com/2025/02/26/thousands-of-exposed-github-repositories-now-private-can-still-be-accessed-through-copilot/
- Lasso Securityhttps://www.lasso.security/blog/lasso-major-vulnerability-in-microsoft-copilot
rogue:R3
Covered by snapshot 45
da93f03b406f409940d0a6ef47b526607f82ebf457d98f69299b88aceede576a
This entry is record number 2167. It has not been edited since it was approved; the hash above would not match if it had. How to verify