Tag
Prompt Injection
2 articles

Development
GhostCommit Shows AI Reviewers and Agents Don't See Alike
GhostCommit hides prompt injection inside a PNG that AI reviewers skip and coding agents read, exposing a harness-level blind spot rather than a broken model.

Development
Your Coding Agent Trips the Same Alarms as an Intruder
Sophos telemetry from June 2026 shows Claude Code, Cursor and OpenAI Codex tripping the same rules built to catch attackers, just as GitHub ships an auto-approve mode.