HomeAI · summaries
Storia in 4 fonti
GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents
Wiz says GhostApproval abuses symlinks so AI coding agents write to SSH keys or shell startup files while showing benign paths.
Confronto fonti
4 prospettive sulla stessa storiaTimeline cronologica
- ·
theregister.com
Bug in top AI coding agents shows that Unix-era security headaches never really die
'GhostApproval' problem highlights human-in-the-loop fails
- ·
thenextweb.com
GhostApproval bug breaks 6 top AI coding agents
Wiz's 'GhostApproval' uses an old symlink trick to make six AI coding agents, from Amazon Q to Cursor, write outside the sandbox and hand over the box.
- ·
thehackernews.com
GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents
Wiz says GhostApproval abuses symlinks so AI coding agents write to SSH keys or shell startup files while showing benign paths.
- ·
Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It
AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command approval is enabled.
- ·
securityweek.com
AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique
Several AI coding assistants were tricked into facilitating developer machine hacking via an attack technique that has been known for decades.