Prompt Injection Defense Weekly

Comment and Control: one PR title stole three agents' keys

A newly disclosed indirect prompt injection class turned Claude Code, Gemini CLI, and GitHub Copilot Agent into credential-theft pipelines using nothing but ordinary PR metadata. Learn the mechanics and five copy-paste-ready mitigations you can ship today.