GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents
https://ift.tt/NqwDVxW at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code
French nonprofit starts global intelligence and research hub for AI cyber threats
The Paris Peace Forum, a French non-profit that has convened world leaders on global security
AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers
https://ift.tt/qG9x8cd looked at a week of its own endpoint data and found that AI coding
New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware
https://ift.tt/ipyRQw6 coding assistants have a habit of making things up. Ask one to fetch a
GitHub Copilot Refuses Harmful Requests in Chat, Then Writes Them in Code
https://ift.tt/2ZqUm68 AI coding assistant that refuses to answer a dangerous request in its chat box
Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots
A critical flaw in Google’s Dialogflow CX could have let an attacker with edit rights
Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants
https://ift.tt/qlFXoUG researchers have disclosed details of a now-patched critical session isolation vulnerability in Writer, an
What Changes When Your Software Supply Chain Includes AI Writing Your Code?
https://ift.tt/bxyliv6 supply chain security was hard enough. Then AI joined the build pipeline. For five
US Army websites defaced with pro-Kurdish sentiments, insults to Trump
Someone defaced error pages on multiple U.S. Army internet subdomains in an apparent 404 hijacking
⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More
https://ift.tt/fSdL2On streaming box should not need a threat model. Neither should a username field, a