A file that a website saves to the Downloads folder without approval can trick AI coding agents into installing a malicious npm package or handing over the user’s login token when they’re opened in that folder, Forever Security has found. The file is called AGENTS.md, a plain text document developers place in a project folder with instructions for... Weiterlesen: AI coding agents fall for malicious instructions planted in the Downl…
Intelligence View
⚡ tsecurity.de Intelligence
AI coding agents fall for malicious instructions planted in the Downloads folder
A file that a website saves to the Downloads folder without approval can trick AI coding agents into installing a malicious npm package or handing over the…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
21 sources
CVE-2026-63874 | Linux Kernel up to 6.18.35/7.0.12 MCTP USB ndo_stop improper synchronization
20 more sources
VVulDB Updates1 hour agoCVE-2026-63873 | Linux Kernel up to 6.18.35/7.0.12 amdxdna amdxdna_aie2_v.c aie2_populate_range memory leak VVulDB Updates1 hour agoCVE-2026-63853 | Linux Kernel up to 6.18.32/7.0.9 Vcn encoder drm/amdgpu/vcn Local Privilege Escalation VVulDB Updates1 hour agoCVE-2026-63856 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 Vcn Encoder Decoder drm/amdgpu/vcn privilege escalation VVulDB Updates1 hour agoCVE-2026-63878 | Linux Kernel up to 6.18.34/7.0.11 amdgpu amdgpu_gem.c kvzalloc allocation of resources VVulDB Updates1 hour agoCVE-2026-63880 | Linux Kernel up to 6.18.34/7.0.11 Amdgpu amdgpu_gem_op_ioctl num_entries denial of service VVulDB Updates1 hour agoCVE-2026-63877 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Dz serial_base_ctrl_add null pointer dereference
+14
11 sources
Security: Mehrere Probleme in keepassxc (Fedora)
10 more sources
PPro-Linux14 hours agoSecurity: Mehrere Probleme in rust-trustfall-rustdoc-adapter60 (Fedora) PPro-Linux14 hours agoSecurity: Mehrere Probleme in rust-trustfall-rustdoc-adapter (Fedora) PPro-Linux14 hours agoSecurity: Mehrere Probleme in rust-trustfall-rustdoc-adapter57 (Fedora) PPro-Linux14 hours agoSecurity: Mehrere Probleme in rust-cargo-semver-checks (Fedora) PPro-Linux Security14 hours agoMehrere Probleme in rust-trustfall-rustdoc-adapter (Fedora) PPro-Linux Security14 hours agoMehrere Probleme in rustup (Fedora)
+4
7 sources
Binance-Hack: Hacker kontrollieren noch 3,33 Mrd. Dollar - FinanceFeeds
6 more sources
GGoogle Alert3 hours agoRekord-Hack bei Binance alarmiert Kryptobranche | FAZ GGoogle Alert2 hours agoSuper-GAU der Kryptobranche: Wie Hacker bei Binance Milliarden geraubt haben NNYT > Cybersecurity5 hours agoHow Binance’s $6.3 Billion Hack Went Down RSS«Hacker News» 🗞️🦾 IT BOLTWI…4 hours agoBinance-Hack: 6 Milliarden Dollar Verlust und die Grenzen von Krypto-Sicherheitsversprechen NNYT > Technology5 hours agoHow Binance’s $6.3 Billion Hack Went Down GGoogle Alert8 hours agoKrypto-Hackerangriff auf Binance - "3,3 Milliarden Dollar sind nicht mehr zurückzuholen"
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4297102/cyber-security-bulletins/ai-coding-agents-fall-for-malicious-instructions-planted-in-the-downloads-folder/