A malicious AGENTS.md file led Codex to execute npm malware in over 90% of tests, while a separate Claude Code attack exposed ...

AI agents will read anything found in the AGENTS.md file, even if that file is downloaded from the internet.

Security researchers found that trusted instruction files can be abused to install malware, redirect API traffic, and weaken built-in safeguards in popular coding assistants.

Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads folder that tricked an AI coding ...

Cybersecurity researchers have uncovered a novel attack vector targeting developers who utilize automated artificial intelligence coding assistants.

If you use 7-Zip, it’s time to patch. The free file-archiving program on Windows can be exploited to launch malware if it encounters a secretly booby-trapped file or website. An advisory about the ...

Multiple vulnerabilities in Anthropic's Claude Code could enable attackers to run harmful commands and steal API keys by hiding malicious files in a code repository, Check Point researchers found.

An ongoing malicious email campaign that includes macro-laden files and multiple layers of obfuscation has been active since late December. The infamous Emotet malware has switched tactics yet again, ...