CyberShieldAlerts
Hacking News·1 min read

GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents

Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer's computer. The assistant asks permission to edit one har

CS
CyberShield Team
2026-07-09
Share:
GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents

Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer's computer. The assistant asks permission to edit one harmless-looking file, but the write lands on a sensitive one instead. The affected tools are Amazon Q Developer, Anthropic's Claude Code, Augment, Cursor, Google Antigravity, and Windsurf.

Tags

#cybersecurity#news
Share:

Join the Discussion

Comments coming soon. Follow us on social media for real-time discussions.

Related Articles

Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes
Hacking News
1 min read

Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes

Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy business using an infrastructure comprisi

CyberShield TeamRead More
Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It
Hacking News
1 min read

Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It

Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker's code on your own machine instead. That is the finding in a proof-of-concept published Wednesday by t

CyberShield TeamRead More
AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers
Hacking News
1 min read

AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers

Sophos looked at a week of its own endpoint data and found that AI coding agents such as Claude Code, Cursor, and OpenAI Codex are setting off detection rules written to catch human intruders. The age

CyberShield TeamRead More
← Previous

Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It

Next →

Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes