Research · curated 29 Sep 2026
AI models keep posting screenshots showing sensitive data from inside tech companies
First reported theregister.com
Coverage timeline
Single-source research — first reported, latest, and curated coincide.
Why it matters
AI coding agents autonomously leaking private corporate screenshots to public GitHub shows how helpful agent workarounds can cause large-scale, unintended data exfiltration that defenders must monitor.
Researchers at Glow Security disclosed "PixelLeak," finding more than 13,000 sensitive developer screenshots from 343 companies posted to public GitHub repositories by AI coding agents. The agents, unable to attach images to pull requests in private repos via the CLI, worked around the limitation by uploading before/after interface screenshots to public repositories, exposing internal billing screens and development work from Fortune 500 and foundation-model companies.