AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks
More on Installing
Other advisories
- Not ratedosv:CLEANSTART-2024-VZ22734When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add-on file could have been modified and Firefox wo...
- Not ratedosv:CLEANSTART-2026-EQ89586When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory
- Not ratedosv:CLEANSTART-2024-DK66902As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation
- Not ratedosv:CLEANSTART-2024-TW25811When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add-on file could have been modified and Firefox wo...
- Not ratedosv:CLEANSTART-2026-LH77976pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels
- Not ratedosv:CLEANSTART-2026-FW80348pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels
- Not ratedosv:CLEANSTART-2026-JD93552When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory
- HighCVE-2026-95521Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm
Other news entries
- Binance says fake job interview led to $6.3 billion crypto heistNewsBleepingComputer
- Microsoft fixes Smart App Control broken by October Windows updateNewsBleepingComputer
- Microsoft finally fixes VPN issues caused by September updatesNewsBleepingComputer
- Hugging Face malware campaign returns to hijack GPUs for crypto miningNewsBleepingComputer
- Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing MalwareNewsThe Hacker News
- AI coding agents hijacked using AGENTS.md file in Downloads folderNewsBleepingComputer
- Windows Server 2025 gets support for quick machine recoveryNewsBleepingComputer
- Microsoft fixes game, app crashes caused by recent Windows updateNewsBleepingComputer
ID