Security researcher at Air Security
Appears in 1 story
Last updated Sep 18, 2026
As of September 2026: Co-authored the Plugin4Shell disclosure
The four most popular AI coding agents carried a zero-click vulnerability that lets an attacker replace a trusted plugin with malicious code. The agents install the replacement silently, with no user action and no prompt.
Updated Sep 18
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
