PixelLeak

Security write-ups this week describe two attack techniques, dubbed GitSpawn and PixelLeak, showing that sandboxing an AI agent does not by itself make it a trust boundary. The argument is that agents can leak data and escalate actions past container-level controls, prompting developers to rethink how trust, permissions and isolation are designed for autonomous AI tools.