Security firm Glow disclosed on September 29, 2026 that it had found more than 13,000 internal screenshots and recordings, from developers at 300+ organizations, sitting in public GitHub repositories — downloadable by anyone, with no login, and invisible to the organizations' own security scanning because the repos lived under developers' personal GitHub accounts, not their employer's.

What the source says

Per The Hacker News' report on Glow's findings: until September 1, 2026, GitHub's CLI ( gh ) had no way to attach an image to a pull request — that only worked in the browser.…