Cyber CrimePlugin4Shell Exposes AI Coding Agents to RCE
A zero-click remote code execution flaw in popular AI coding agents could let attackers run malicious code without developer interaction, researchers warn.
> Search
6 results for “coding agents”
Cyber Crime
SecurityDocker Fixes macOS Sandbox Escape Flaws
Two Docker Sandboxes vulnerabilities let malicious guest code read or modify macOS host files, with fixes shipped in version 0.42.0.
AI & MLHow MCP Splits Can Leak Secrets
Malicious MCP servers can split instructions to make AI coding agents exfiltrate secrets, ASSET reports.
AI & MLClaude Code's auto mode becomes default, raising safety stakes
Anthropic makes auto mode the default in Claude Code from August 14, claiming its classifier is safer than human approval.
SecurityAI Coding Agents Face Hallucination Risks
Researchers identify a recurring security flaw where AI agents blindly execute commands based on predictable, hallucinated names.
SecurityHalluSquatting Turns AI Assistants Into Silent Botnet Factories
Researchers discover a critical vulnerability where AI coding agents are tricked into executing malicious code via hallucinations.