Digital Warfare Daily Brief April 10, 2026

The Digital Warfare Podcast · Apr 10, 2026 · 4m

SummaryA high-severity flaw in GitHub Copilot Chat (CVE-2025-59145), known as “CamoLeak,” allowed attackers to silently exfiltrate sensitive data — including source code, API keys, and cloud secrets — from private repositories by abusing Copilot’s context ingestion and hidden prompt injection, without requiring malicious code execution. The vulnerability was patched by GitHub.

Key Takeaways

• GitHub Copilot Chat had a critical vulnerability (CVE-2025-59145) enabling data exfiltration.

• Attackers used hidden prompt injection in pull requests to manipulate Copilot’s behavior.

• No malicious…