'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows

The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too.

Commercial risk teams are responding with tighter controls, scenario modeling, and broader collaboration across underwriting, claims, and cyber operations.

Leaders continue to prioritize resilience planning while balancing cost, coverage terms, and operational exposure in a changing market cycle.