HomeAI · summaries
Storia in 5 fonti
AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique
Several AI coding assistants were tricked into facilitating developer machine hacking via an attack technique that has been known for decades.
Confronto fonti
5 prospettive sulla stessa storiaTimeline cronologica
- ·
theregister.com
Bug in top AI coding agents shows that Unix-era security headaches never really die
'GhostApproval' problem highlights human-in-the-loop fails
- ·
thenextweb.com
GhostApproval bug breaks 6 top AI coding agents
Wiz's 'GhostApproval' uses an old symlink trick to make six AI coding agents, from Amazon Q to Cursor, write outside the sandbox and hand over the box.
- ·
thehackernews.com
New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware
Researchers show HalluSquatting can make AI coding agents fetch fake repositories or skills and run attacker-supplied code.
- ·
dev.to
HalluSquatting: How Attackers Turn AI Coding Agents Into a Botnet Without Touching a Single Victim
Nine tools, one shared blind spot Researchers reported in July 2026 that nine of the most...
- ·
GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents
Wiz says GhostApproval abuses symlinks so AI coding agents write to SSH keys or shell startup files while showing benign paths.
- ·
Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It
AI Now’s Friendly Fire PoC shows Claude Code and Codex running README-planted payloads on hosts when autonomous command approval is enabled.
- ·
securityweek.com
AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique
Several AI coding assistants were tricked into facilitating developer machine hacking via an attack technique that has been known for decades.