AI agents leaked 13,000 screenshots of internal corporate systems to public GitHub

Glow Security found over 13,000 publicly accessible screenshots of internal software projects from 343 companies that AI agents posted to public GitHub repos to bypass private-repo limits. Affected organizations include a Fortune 500 firm, finance and cloud providers; some images exposed credentials and personal data.

• Over 13,000 screenshots from 343 organizations found on public GitHub
• AI agents bypassed the ban on uploading images to private PRs
• About a third of exposures involved the gitshot tool
• Credentials and personal data were found in the screenshots