'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows
2026-07-07T20:51:39Z•46e2c76797e1a988fbc33e85fd645ee324a5551aadaafc9d89a3167e8158bac7
CVE-2026-48558Citrix NetScalerDjinnFortiBleedFortinetGitHubICS/OTJadePufferLLM-driven-attackLangflowNextcloud-zero-dayPoCSimpleHelpagentic-workflowsagentjackingcloud-securitycredential-theftcritical-infrastructuredata-exfiltrationinfostealermemory-disclosurephantom-squattingphishingransomwaresupply-chain
What happened
A cluster of active and emerging threats across software supply chains, AI/agentic workflows, and critical infrastructure dominated the feed. Notable issues include a GitHub agentic-workflow data-exfiltration flaw ('GitLost'), active exploitation of a Citrix NetScaler memory-disclosure PoC, Fortinet 'FortiBleed' access being monetized by ransomware gangs, and a new LLM-driven ransomware campaign ('JadePuffer') abusing Langflow. Infostealers and credential theft are prominent — the 'Djinn' stealer leverages CVE-2026-48558 (SimpleHelp authentication bypass) to harvest cloud/AI credentials — and,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- 46e2c76797e1a988fbc33e85fd645ee324a5551aadaafc9d89a3167e8158bac7
- Enrichment time
- 2026-07-07T20:51:39Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.