Posts tagged "ai-agents"
4 posts
-
Your Agent Is Mine: the LLM Router as a Supply-Chain Attack Surface
What if the model is not the thing that got hacked? Your Agent Is Mine: Measuring Malicious Intermediary Attacks on the LLM Supply Chain If your agent talks to OpenAI,...
-
UNC Paths as a Covert Exfiltration Channel in AI Coding Agents
What if a prompt-injected agent could use safe, read-only tools to silently exfiltrate your secrets? Data exfiltration from AI coding agents is a well-documented attack class. Johann Rehberger (embracethered) has...
-
Caught in the Hook... or just API key exfiltration:
In my previous post, I explained the concept of the folder trust gap in AI agents. And today someone released a new article which describes such vulnerabilities in Claude Code....
-
The Trust Gap: Your AI Agent Is Running Code Before It Asks Permission
What is the threat model of an AI agent that operates in your terminal? One of the first things that happens when you type claude/codex/copilot/gemini in your terminal is that...