Top all-time · #11127
Noma
Company blog · noma.security/blogsecurityai
Noma is the company blog at noma.security, writing about security and ai. Since 2025, 7 different Hacker News readers have linked it 7 times, most often “GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos”. No feed was found, so read it on the site itself.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
Linked as the source for a post about GitLost, Noma's research on tricking GitHub's AI agent into leaking private repos. The only comment is a bare source link.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
The Agent Security and Governance Platform that helps enterprise security teams enable AI without losing control.
Most-linked posts?
- GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos2 people · 2 mentions · first linked 2026-07-08
- ForcedLeak: AI Agent risks exposed in Salesforce AgentForce2 people · 2 mentions · first linked 2025-09-26
What Hacker News says?
Source: https://noma.security/blog/gitlost-how-we-tricked-githubs-ai...
Comment linking /blog/gitlost-how-we-tricked-githubs-ai-agent-into-leaking-private-repos/
on “GitHub AI agent leaks private repos when asked nicely”Submitted Claude Code Desktop Vulnerability: Preview Pane Data Exfiltration as a story · 16 points
HN discussionSubmitted GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos as a story · 4 points
HN discussionSubmitted ForcedLeak: AI Agent risks exposed in Salesforce AgentForce as a story · 3 points
HN discussionSubmitted ForcedLeak: AI Agent risks exposed in Salesforce AgentForce as a story · 2 points
HN discussionSubmitted GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos as a story · 1 points
HN discussionSubmitted ContextCrush: The Context7 MCP Server Vulnerability Hiding in Plain Sight as a story · 1 points
HN discussion
