Posts tagged "ai-agents"
3 posts
-
UNC Paths as a Covert Exfiltration Channel in AI Coding Agents
What if a prompt-injected agent could use safe read only tools to silently exfiltrate your secrets? Data exfiltration from AI coding agents is a well-documented attack class. Johann Rehberger (embracethered)...
-
Caught in the Hook... or just API key exfiltration:
In my previous post, I explained the concept of the folder trust gap in AI agents. And today someone released a new article which describes such vulnerabilities in Claude Code....
-
The Trust Gap: Your AI Agent Is Running Code Before It Asks Permission
What is the threat model of an AI agent that operates in your terminal? One of the first things that happens when you type claude/codex/copilot/gemini in your terminal is that...