The GitHub token leak and other disclosures

One of the reports: An agent used DNS to reach an external chatbot.

I found Self-replicating prompt injections exist interesting.

A thread by an OpenAI researcher who works on monitoring, on how a model published a GitHub token in a public repo while trying to cheat on a math task.