Security researcher at Air Security
Appears in 1 story
Co-authored the Plugin4Shell disclosure
The four most popular AI coding agents carried a zero-click vulnerability that lets an attacker replace a trusted plugin with malicious code. The agents install the replacement silently, with no user action and no prompt.
Updated 1 hour ago
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
