Copilot CLI Prompt Injection: Encrypted Payloads and Developer Secret Theft

A newly disclosed GitHub Copilot CLI vulnerability abuses encrypted prompt injection to exfiltrate developer secrets and local files, while a ransomware affiliate separately weaponizes AI coding assistants and MCP servers as command-and-control channels in live enterprise intrusions.