Anthropic, Google, Microsoft paid AI bug bounties – quietly
… "If they don't publish an advisory, those users may never know they are vulnerable – or under attack." He said the attack probably works on other agents that integrate with GitHub, and GitHub Actions that allow access to tools and secrets, such as Slack bots, Jira agents, email agents, and deployme… …