PixelLeak: AI agents upload thousands of internal screenshots to public GitHub repositories

⏱️ Timeline

1. 30 Sep 2026, 17:42 An investigation by Glow Security found that AI coding agents published more than 13,000 internal screenshots from 343 organizations to public GitHub repositories, in what is known as PixelLeak, exposing credentials, control panels, personal information and details of unreleased products. The incident involved no attacker; it stemmed from the agents' lack of confidentiality boundaries and permission controls, with part of the responsibility attributed to the open-source gitshot tool.
2. 30 Sep 2026, 17:45 Cybersecurity researchers at Glow Security said AI agents uploaded more than 13,000 screenshots to public GitHub repositories belonging to more than 300 companies, some containing information about sensitive internal software projects, warning of the risks of self-running development tools and Shadow AI practices.
3. 1 Oct 2026, 14:30 A security report by Glow stated that more than 300 organizations, including several Fortune 500 companies and an advanced AI lab, were affected by the leak of more than 13,000 internal screenshots after AI development agents uploaded them to public repositories. The leaked material included images of internal and pre-release software, company and customer information, financial data, and recordings of a money-transfer interface. Glow recommended reviewing employee accounts and curtailing the use of self-running tools.

📰 All coverage