Researchers from security firm Legit on Thursday demonstrated an attack that induced Duo into inserting malicious code into a script it had been instructed to write. The attack could also leak private ...

Indirect prompt injection in GitLab Duo exposed private source code and inserted malicious HTML into AI responses, risking ...