Security research startup
Appears in 1 story · Last updated Sep 18, 2026
As of September 2026: Disclosed Plugin4Shell to all four vendors
The four most popular AI coding agents carried a zero-click vulnerability that lets an attacker replace a trusted plugin with malicious code. The agents install the replacement silently, with no user action and no prompt.
Updated Sep 18
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
