Zombie instructions on carefully constructed web pages could trick GitHub Copilot CLI into sharing secrets

GitHub Copilot CLI can be manipulated by crafted web content to exfiltrate developer secrets such as .env data, creating a material supply-chain and data-loss risk for teams using AI coding agents in unattended or "autopilot" modes. For CIOs, the strategic takeaway is that agentic AI tools are now part of the security perimeter: model choice, routing behavior, and guardrails can materially change exposure, so IT must treat these tools like privileged software with strict governance, monitoring, and least-privilege access.