A plain text file placed in the Downloads folder can trick AI coding agents into changing their settings, installing malware, or exposing login tokens. Forever Security discovered the risk after stopping an agent on a real customer’s computer from installing a known malicious npm package. The company later reproduced separate attack paths against... Weiterlesen: Hackers Can Hijack OpenAI Codex and Claude Code Using Malicious Files…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Can Hijack OpenAI Codex and Claude Code Using Malicious Files in Downloads Folder
A plain text file placed in the Downloads folder can trick AI coding agents into changing their settings, installing malware, or exposing login tokens. Forever…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
37 sources
New MacBook Pro Gets PROLED XDR Display, Touchscreen, Dynamic Island
36 more sources
OOS X Daily1 hour agoTouchscreen MacBook Pro Launched by Apple CCNET2 hours agoTouchscreen MacBook Pro Hands-On: Apple Finally Lets Us Swipe the Screen CCNET1 hour agoThe MacBook Pro OLED Isn’t the Touchscreen Mac I Was Looking For MMacerkopf.de2 hours agoTouchscreen im MacBook Pro: Apple erklärt, warum es so lange gedauert hat LLatest from TechRadar3 hours agoWhat's the tech inside the touchscreen MacBook Pro's 'PROLED XDR' screen? We explain all EEngadget2 hours agoApple's PROLED XDR Display has a cringy name but incredible specs
+30
12 sources
LF Live Maintainer Session: My Life as a Linux Kernel Developer and Maintainer with Mimi Zohar
11 more sources
VVulDB Updates1 hour agoCVE-2026-63928 | Linux Kernel up to 7.0.11 Serial Omninet memory corruption (Nessus ID 372926) VVulDB Updates1 hour agoCVE-2026-98222 | Linux Kernel up to 6.12.111/6.18.53/7.2.7/7.3-rc3 KEYS encrypted_key_alloc integer overflow (Nessus ID 372925) VVulDB Updates1 hour agoCVE-2026-98174 | Linux Kernel up to 7.3-rc3 smb cifs_signal_cifsd_for_reconnect null pointer dereference (Nessus ID 372925 / WID-SEC-2026-3743) VVulDB Updates59 min. agoCVE-2023-53675 | Linux Kernel up to 6.2.2 scsi ses_enclosure_data_process out-of-bounds (EUVD-2025-31966 / Nessus ID 283685) VVulDB Updates59 min. agoCVE-2023-53662 | Linux Kernel up to 6.1.53/6.5.3 ext4 ext4_fname_setup_filename memory leak (EUVD-2025-31971 / Nessus ID 303082) VVulDB Updates59 min. agoCVE-2023-53664 | Linux Kernel up to 6.5.2 OPP drivers/opp/core.c dev_pm_opp_get_required_pstate null pointer dereference (EUVD-2025-31949 / WID-SEC-2025-2229)
+5
9 sources
Google Debuts New AI Models, Genie 4 and Gemini 4 Carbon: What You Need to Know
8 more sources
EeWeek6 hours agoGoogle Brings Gemini Robotics ER 2 to Cloud Public Preview Hheise online News1 hour agoNeues LLM: Gemini 4 Carbon ist Exploit-Experte CCaschys Blog3 hours agoGemini 4 Carbon: Gemini hat ein neues leistungsstarkes Flaggschiff-Modell AArena3 hours agoArena: Gemini 4 Carbon | First Impressions TThe Decoder3 hours agoGoogle Deepmind releases Gemini 4 Carbon just two weeks after Argon with gains across the board GGoogle Alert3 hours agoGoogle stellt Gemini 4 Carbon vor, ein KI-Modell für Cybersicherheit und Programmierung
+2
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4297786/malware-threat-intel/hackers-can-hijack-openai-codex-and-claude-code-using-malicious-files-in-downloads-folder/