Offensive security testing

Mandiant's testers talked an internal AI assistant into pushing private repos to their own GitHub

Mandiant's report describes an assistant that had permission to clone internal repositories and an approved domain to push them to, and an accounting agent whose runaway loop billed about $50,000 in under an hour.